NOTICE 


THIS DOCUMENT HAS BEEN REPRODUCED FROM 
MICROFICHE. ALTHOUGH IT IS RECOGNIZED THAT 
CERTAIN PORTIONS ARE ILLEGIBLE, IT IS BEING RELEASED 
IN THE INTEREST OF MAKING AVAILABLE AS MUCH 
INFORMATION AS POSSIBLE 



W*"-VV' " 


I 

I 

I 

I 

I 

I 


— Bolt Beranek and Newman Inc. 







Report No. 4374 


PROCRU: A Model for Analyzing Crew Procedures 
in Approach to Landing 

S. Baron, R. Muralidharan, R. Lancraft, and G. Zacharias 


(NAS A-CB - 152397) FROCEU: A .10 DEL FOR 

ANALYZING CHEW PROCEDURES IN APPROACH TO 
LANDING Interim Report (boat, Beranek, and 
Newman, Inc.) 223 p RC AtO/ttF A0 1 CSCL 05E 


April 1980 


G3/53 


Nb0-33030 


Onclas 

34107 


Prepared for: 

National Aeronautics and Space Administration 
Ames Research Center 



I 


Report No. 4374 


Bolt Beranek and Newman Inc 


PROCRU: A Model for Analyzing Crew Procedures in Approach 

to Landing 


Contract No. NAS2-10035 


May 1980 


Prepared for: 

National Aeronautics and Space Administration 
Ames Research Center 


Report No. 4374 


Bolt Beranek and Newman Inc 


Table of Contents 

Page 

1. INTRODUCTION 1 

2. TIME-LINE ANALYSIS 4 

2.1 Nominal Approach Trajectory 5 

2.2 Time-Line Analysis 16 

3. PROCRU: A MODEL FOR ANALYZING FLIGHT CREW PROCEDURES . 42 

3.1 System Model 44 

3.2 Human Operator Models 51 

3.3 Summary 61 

4. DEFINITIONS OF PROCEDURES 

4.1 Procedure Categories and General Overview 63 

4.2 Detailed Procedure Descriptions 67 

4.3 Expected Gain Functions for Procedures 94 

4.4 Procedure Execution 98 

5. SIMULATION RESULTS 103 

5.1 Simulation Conditions 103 

5.2 PROCRU Outputs 107 

5.3 Simulation Results . 119 

C. CONCLUDING REMARKS 152 

REFERENCES 156 

APPENDIX A: GLOSSARY A-l 

APPENDIX B: GLIDE SLOPE AND LOCALIZER B-l 

B.l Basic Geometry B-l 

B.2 Functional Description B-l 


-i- 


Report No. 4374 


Bolt Beranek and Newman Inc 


Page 

APPENDIX C: VEHICLE DYNAMICS C-l 

C. 1 Non-Linear Equations of Motion C-l 

C.2 Lift and Drag C-2 

C. 3 Decomposition of States and Controls C-6 

C.4 Decomposition of Lift and Drag C-8 

C.5 Decomposition of Equations of Motion C-13 

C.6 Definition of Nominal Trajectory Segments C-18 

C.7 Solution for Nominal Controls C-22 

C. 8 Perturbation Equations C-25 

APPENDIX D: MODEL FOR EXTERNAL VISUAL C U . NG D-l 

D. 1 Perspective Geometric Modelling D-l 

D. 2 Definition of Visual Cue Set D-4 

D. 3 Simplified Visual Cue Set D-8 

D.4 Display Equation D-10 

D. 5 Visual Thresholds D-12 


-l I- 


Report No. 4374 


Bolt Beranek and Newman Inc. 


2.1 

2.2 

2.3 

2.4 

2.5 

2.6 
2.7 
2.3 

2.9 

2.10 

2.11 

2.12 

4.1 

4.2 

4.3 

4.4 

4.5 

4.6 

4.7 

4.8 

4.9 

4.10 

4.11 

4.12 

4.13 

4.14 

4.15 




List of Tables 


Page 


Reference Speed (VREF) vs. Gross Weight (GWT) 13 

Landing Flap Setting (LFLAP) vs. Bug Speed (VBUG) .... 13 

Approach/Threshold Speed Determination 13 

Time Histories of Important Trajectory Variables .... 14 

Definitions of Symbols 15 

PF Requests/Callouts 17 

PNF Callouts 18 


Summary of Checklist Items Presented in Time Line 


Analysis 

Summary of Procedural Terms Used in Timeline 21 

Standard Approach Time-Line 25 

Monitored Approach Time-Line 36 

Missed Approach Procedure 38 

PF and PNF Procedures 64 

Maneuver Procedure-Functional Sequence for PF. ..... 69 

Velocity Maneuver Procedures 72 

Heading Maneuver Procedures 74 

Flare Maneuver Procedure 74 

Altitude Maneuver Procedure. ..... 74 

State /Display Weightings vs. Approach Process 78 

State/Display Modifications vs. Maneuver 79 

Control Weightings vs. Maneuver 79 

Retrim Procedure (PF) 82 

Flap Request Procedure (PF) ....... 84 

Gear Request Procedure (PF) 84 

Checklist Initiation Request Procedure (PF) 86 

Approach Progress Callout Procedure (PNF) 86 

Altitude Alert Subsystem Servicing Procedure 88 




-iii- 



i 


r 


Report No. 4374 Bolt Beranek and Newman Inc. 


Tables (cont. ) 

Page 


4.16 Subsystem Servicing Procedure (PF/PMF) 88 

4.17 Flap /Gear Subsystem Servicing Procedure (PNF) .89 

4.18 Acknowledgement Procedure 91 

4.19 SAP/MAP Terminal Procedures 92 

1.20a Procedural Parameters, PF 99 

4.20b Procedural Parameters, PNF 100 

5.1 ATC Commands for Approach Scenarios 104 

5.2 Mnemonics for Time Lines 109 

5.3 PROCRU Simulated Cases 120 

5.4 Standard Deviation of Estimation Errors at Decision 

Height 147 

B.l Localizer Parameters .... B-6 

B. 2 Glide Slope Parameters B-6 

C. l Lift Coefficient Parameter Values. C-5 

C . 2 Drag Coefficient Parameter Values. . . C-5 

C. 3 Specification of Nominal Maneuver Rates C-19 

C.4 Nominal Trajectory Variables C-21 


D. 1 Visual Cue Dependence on Vehicle State Perturbations . . .D-5 


- i v- 










Report No. 4374 


Bolt Beranek and Newman Inc. 


List of Figures 

Page 

2.1 Vehicle Ground Track 6 

2.2 Altitude, Velocity, and Heading Profiles 8 

2.3 Final Approach Trajectory 11 

3.1 Model Structure for Crew Member Analysis 45 

5.1 Sample PROCRU Trajectory Information File (case 1LS). . 108 

5.2 Sample PROCRU Procedure Time Line (case 1LS) Ill 

5.3 Sample PROCRU Message Time Line (case 1LS) 117 

5.4 Sample PROCRU Milestone Time Line (case 1LS) 122 

5.5 Monitored Approach Time Line (case 1LS) 134 

5.6 Milestone Time Line: High ATC Workload Scenario 

(case 1LS ) 136 

5.7 Final Portion of Time Line for High Disturbance Level 

(case 4LS ) 150 

B.l Glide Slope and Localizer Geometries B-2 

B.2 Basic Localizer Geometry (bottom view) b-3 

B.3a Basic Glide Slope Geometry (bottom view) B-7 

B.3b Basic Glide Slope Geometry (side view) B-7 

D. 1 Visual Cue Dependence on Vehicle State Perturbations. . D-2 

D.2a Line Element Orientation Cue. D-2 

D.2b Line Element Length Cue D-2 

D.2c Line Element Displacement Cue D-2 


-v- 


Report No. 4374 


Bolt Beranek and Newman Inc 


PREFACE 

The work reported here was performed under NASA-Ames Research 
Center Contract Number NAS2-10035. Technical Monitor was Dr. 
Renwick E. Curry. 

Dr. Carl Feehrer of BBN made a major contribution to the 
time-line analysis and development presented in Chapter 2. We also 
wish to acknowledge the valuable assistance provided during 
formulation of the time-line by Capt. Leonard Poor (Delta Airlines) 
and First Officer Oliver Kuronen (FO, Northeast Airlines, Ret.). 
Finally, we wish to thank Mr. Emmett O'Hare of the Air Transport 
Association for his assistance in obtaining flight manual 
information. 


-vi- 


Report No. 4374 


Bolt Beranek and Newman Inc 


SUMARY 

A model for analyzing crew procedures in approach-to-landing 
is developed. The model employs the information processing 
structure used in the Optimal Control Model and in recent models 
for monitoring and failure detection. Mechanisms are added to this 
basic structure to model crew decision-making in this multi-task 
environment. Decisions are based on probability assessments and 
potential mission impact (or gain) . Sub-models for procedural 
activities are also included. Where these procedures affect 
aircraft responses or the information state of the crew, the 
effects are accounted for explicitly; where they affect sub-system 
operation, only the attentional load they impose is considered. 
Procedures can be interrupted and finished subsequently, or not 
completed at all, based on decisions made by the model. However, 
this initial implementation of the model does not permit procedural 
steps to be skipped over or reordered. 

The model distinguishes among external visual, instrument 
visual, and auditory sources of information. The external visual 
scene perception models incorporate limitations in obtaining 
information. The auditory information channel contains a buffer to 
allow for storage in memory until that information can be 
processed. 
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Though parts of the model have been validated experimentally, 
no validation claims can be made for the complete model or all of 
its parts. In addition, some important aspects of human behavior 
(such as fault diagnosis of "trouble shooting", errors in discrete 
actions, or the effects of stress or social pressures in the 
cockpit) are not modelled, except by direct assumption. 

Computer results are presented to illustrate the operation of 
the model. The effect on model predictions of some assumptions 
concerning crew activity and/or scenario factors are also explored. 
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1. INTRODUCTION 

This report summarizes the results of efforts in Contract 
NAS2-10035 for the NASA-Ames Research Center to "Analyze and Model 
Flight Crew Procedures in Approach to Landing." The objectives of 
this contract were to analyze the functions and responsibilities 
of the crew in nominal. Category I ILS approaches (of a 727) and 
to develop an analytic/computer model for the task that could be 
used to explore the effects of flight crew procedures and other 
critical factors on performance and safety. 

Chapter 2 of the report presents the results of the task 
analysis. The analysis was based on a detailed examination of 
flight manuals and discussions with flight personnel. A time-line 
was developed showing the activities of each member of the crew 
keyed to location in the nominal approach profile and "triggering 
events." The time-line is not intended to reflect the specific 
procedures of any air carrier but is, instead, an amalgamation that 
attempts to capture the significant aspects of the various 
procedures used. These results were reported earlier in an interim 
report (1] . They are repeated here, with minor modifications, for 
the reader's convenience. 

In Chapter 3, we describe the model for the crew in the 
approach-to-landing task that was developed (called PROCRU for 
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Procedure Oriented Crew Model). As the name implies, the model is 
procedure oriented. However, it also emphasizes information 
processing and decision making aspects of human performance. 
Briefly, each crew member is assumed to have a set of "procedures" 
or tasks to perform. The procedures include both routines 
established "by the book" (such as checklists) and tasks to be 
performed in some "optimizing" fashion (such as flying the 
airplane) . The particular task chosen at a given instant in time 
is the one perceived to have the highest expected gain for 
execution at that time. The gain is a function of mission 
priorities and of the perceived estimate of the state-of-the-world 
at that instant. This estimate is based on monitoring of the 
displays, the external visual scene and auditory inputs from other 
crew members. PROCRU draws heavily on the concepts and submodels 
of the Optimal Control Model for the human operator [2) for its 
information processing and control representation. However, there 
are many novel aspects and features of the model that constitute 
new developments. 

Chapter 4 contains a detailed description of the specific 
procedures defined in PROCRU. The functions used in calculating 
the gain for selecting procedures as well as the "recipes" for the 
procedures are presented. 
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In Chapter 5, results illustrating the operation of PROCRU are 
presented. Sensitivity to system parameters and to operator 
parameters is examined. 

The last chapter contains some recommendations for further 
investigation with PROCRU and for extensions of this initial 
implementation . 
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2. TIME-LINE ANALYSIS 

In this chapter we present the results of a task analysis 
conducted to define the primary activities of each crew member , the 
"triggering events" associated with these activities, and the major 
flight milestones occurring along a category I raw-data ILS 
approach.* Since the sequencing of all of these time-line 
activities are dependent on the particular approach flown, a 
subsidiary goal of the analysis was to define an idealized 
"nominal" radar-vectored vehicle trajectory, representative of this 
type of ILS approach; the resulting trajectory parameter 
time-histories are thus also presented in this chapter. 


Our goal here has been to develop a broad characterization of 
the procedures required for conducting raw-data category I ILS 
approaches. To this end, we have attempted to favor a composite of 
crew tasks and activities identified in the formal publications of 
different U. S. carriers, reported on in other studies of flight 
management during approach and landing, and obtained from 
discussions with personnel representing the three crew positions 
(Captain, First Officer, and Second Officer) of a 727. We believe 
that the resulting representation, while not directly representing 
a specific carrier under perfectly realistic conditions. 


lecis 


ange 
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successfully portrays the major elements of flight management 
needed for the modelling effort. 

Section 2.1 below defines the nominal approach trajectory, and 
Identifies the basic procedures associated with flight path 
control. Section 2.2 concludes the chapter with a time-line 
analysis of both a standard and monitored ILS approach, and a 
definition of general missed approach procedures. For the reader's 
convenience, a glossary of symbols and mnemonics is provided in 
Appendix A. 

2 . 1 Nominal Approach Trajector y 

Vehicle ground track is shown in Figure 2.1. The reference 
coordinate system is the local geographic navigation frame (north, 
east, and down) , with the origin located at the effective glide 
slope transmitter location. For convenience in analysis, it was 
assumed that the runway (and localizer center line) is aligned 
along the east-west direction, and that the runway and surrounding 
terrain are at sea level. 

The figure shows down range and cross-range distances, 
measured from the glide slope transmitter. Specific points along 
the ground track are tagged by time-to-go (time-to-touchdown) 
values, and correspond with specific flight milestones to be 
described shortly. 
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The altitude, velocity, and heading profiles associated with 
this trajectory are given in Figure 2.2. Since the runway and 
surrounding terrain are at sea level, altitude and height above 
field elevation (AFE) are equivalent. Since no wind is assumed 
present, velocity and airspeed are likewise equivalent. 

The vehicle is assumed to be radar vectored to the point at 
which the localizer becomes "active", following which final 
approach procedures are used to touchdown. As noted in Appendix B, 
it is assumed that a 2 dot localizer error (2 deg off final) will 
initiate HSI activity; the point of Figure 2.1 tagged t go =393 thus 
conveniently separates the approach into an initial portion (before 
localizer activity) and a final portion (after localizer turn on). 
The next two sections provide details regarding these two approach 
phases . 

2.1.1 Initial Approach 

At the beginning of the initial approach, the vehicle is at 
10000 ft, and travelling at 190 kts on a 210 deg heading; by the 
end of the phase the vehicle has descended to 2000 ft and slowed to 
160 kts, and attained a 120 deg intercept course with the localizer 
approximately 16 nm from the field. This is accomplished with two 
descents, two decelerations, and three heading changes. Specific 
assumptions regarding this initial phase trajectory are as follows; 
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1. Altitude, velocity, and heading changes are in direct 
response to ATC requests, and are accomplished in an 
accurate and timely manner. 

2. The initial descent from 10000 ft to 3500 ft is made with 
an 1800 fpm sink rate; the second descent from 3500 ft to 
2000 ft is made with a 900 fpm sink rate. 

3. Both decelerations (from 190 kts to 170 kts to 160 kts) are 
made at a constant rate of 1 kt/sec. 

4. All three heading changes assume a 3 deg/sec turn rate 
(two-minute turns) , and assume 5 sec maneuver times for 
both rolling into and out of the turn. 


2.1.2 Final Approach 

At the beginning of the final approach phase, the vehicle is 
at 2000 ft, and travelling at 160 kts on a 120 deg heading; the end 
of this phase is defined by touchdown. 

As noted earlier, it is assumed that the localizer becomes 
"active" when the vehicle is 2 dots off the localizer plane. This 
event signals the start of this final approach phase, and triggers 
a 0.5 deg/sec turn from the initial 120 deg heading to the final 
approach heading of 90 deg. Completion of the turn (at 
t go « 332 sec) occurs as the vehicle intercepts the localizer 
plane. The vehicle then proceeds on a constant altitude (2000 ft) , 
constant speed (160 kts) course until the glide slope becomes 
"active" . As noted in Appendix B, this occurs when the vehicle is 
2 dots below the glide slope (at t go «272 sec as shown on Figure 
2 . 1 ) . 
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The remainder of the final approach trajectory is shown in 
more detail in Figure 2.3. This localizer plane view shows 
specific trajectory points tagged with a triplet indicating 
tirae-to-go, altitude, and airspeed, and illustrates a standard 
approach based on the following assumptions: 


Environment 

1. The runway and surrounding terrain are at sea level. 

2. No winds or gusts are present. 

Geometry 

3. The glide slope and runway geometries are those described 
in Appendix B. 

4. The glide slope becomes "active" at 2 dots below the glide 
slope. 

5. The middle and outer markers are 0.67 nm (4000 ft) and 
5.3 nm (32000 ft) from runway threshold, respectively. 

Vehicle/Configuration 

6. Vehicle gross landing weight is 150,000 lbs. 

7. A 30 deg landing flap setting is chosen. 

Procedure 


8. A 1 kt/sec deceleration to 150 kts is initiated when the 
glide slope becomes active (tg Q ■ 272 sec) . 

9. An 8 fpm sink rate is initiated 1/2 dot below the glide 
slope (t go * 215 sec) . 

10. A 1 kt/sec deceleration to 140 kts is initiated 10 sec 
before glide slope intercept (tg Q » 169 sec) . 

11. Stabilization on the glide slope, at the approach speed of 
139 kts, is achieved at the outer marker (tg Q « 149 sec) . 
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12. A 1 kt/sec deceleration, to the threshold speed of 134 k' , 
is initiated 5 sec before threshold crossing 
(t go * 15 sec) . 

13. A flare to touchdown is initiated at threshold crossing 
(t go = 10 sec). 

Items 11 and 12 above assume a bug speed (VBUG) of 134 kts is 
chosen, on the basis of the reference speed and landing flap 
procedural rules defined by Tables 2.1 and 2.2, and on the basis of 
items 6 and 7. In addition, items 11 and 12 assume the approach 
speech (VAPP) of 139 kts and the threshold speed (VTHRESH) of 
134 kts are chosen on the basis of the airspeed selection 
procedures summarized in Table 2.3, and on the basis of item 2. 

2.1.3 Trajectory Variables 

Time histories of the important trajectory variables are given 
in Table 2.4; the mnemonics associated with each variable are 
defined in Table 2.5. For convenient reference, the trajectory 
variables of Table 2.4 have been augmented with time histories of 
ATC requests, and a number indexing scheme has been used to relate 
these requests to the corresponding crew/vehicle responses (for 
example, ATC request number 3 at t go »1000, "descend to 3500 ft", is 
followed by a descent initiation at t go «950) . In addition, 
important trajectory "events" have been tabulated, to show the 
relation between these events and major trajectory changes. 
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Table 2.1: Reference Speed (VREF) vs. 

Gross Weight (GWT) 


GWT (10 3 lbs) 

VREF (kts) 

110 

108 

120 

113 

130 

119 

140 

124 

150 

130 

160 

136 

170 

141 

180 

147 

190 

153 


Table 2.2: Landing Flap Setting ( LFLAP ) vs. 

Bug Speed ( VBUG) 


LFLAP (deg) 

VBUG (kts) 

30 

VREF + 4 

40 

VREF 


Table 2.3: Approach/Threshold Speed Determination 


VWIND 

VGUST 

VAPP 

VTHRESH 

< 10 and 

0 

VBUG+5 

VBUG 

> 10 or 

> 0 

VBUG+VWIND/2+VGUST 

VBUG+VGUST 


Note 1: all speeds in kts 

Note 2: Maximum allowable value of VAPP is (VBUG+20) 
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Table 2.5: Definitions of Symbols 


TGO 

V 

A 

H 

RX 

RY 

G 

ADOT 

DTGO 

DA 

DR 

THR 


GEAR: 

FLAP: 


time- to- touchdown (sec) 
airspeed '<ts or ft/sec) 
altitude (ft) 
heading (deg) 

east-west ground- track range to GS XMTR (ft) 
north-south ground- track range to GS XMTR (ft) 
flight path angle (deg) 
altitude rate (ft/sec) 

time interval between TGO markers (sec) 
change in altitude over DTGO interval (ft) 

change in distance along ground-track over DTGO interval (ft) 

throttle (A * adjust; SLF = set for level flight; 

SFI * set to flight idle) 

landing gear position (U = up; D = down) 

flap setting (deg) 
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2 . 2 Ti me-Line Analysis 

To provide a qualitative and quantitative description of crew 
activity during approach-to-landing, we conducted a time-line 
analysis of crew procedures. Our effort centered on the baseline 
trajectory described in the previous section, and presumed ATC 
radar vectoring to &n ILS final. Glide slope and localizer 
geometries were assumed to be those described in Appendix B. 
Flight path management requirements (e.g., velocity, altitude, and 
heading transitions) were taken from the previous section, as were 
the procedural assumptions regarding transition characteristics 
(e.g., deceleration rates, sink rates, and turn rates). 

In addition to these flight management requirements, the 
time-line analysis assumed additional procedural requirements 
imposed on the crew. The callout requirements assumed for the 
pilot flying (PF) and pilot not flying (PNF) are given in 
Tables 2.6 and 2.7. Requirements for verbal requests by the PF are 
also given in Table 2.6. 

Included among the procedural elements in the time-line are 
three checklists typically required to be completed between 10,000 
ft and the OM. Summaries of items assumed to be contained in each 
of the checklists are presented in Table 2.8. 
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Table 2.6: PF Requests/Callouts 
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Table 2.7: PNF Callouts 


Condition 


LOC/GS activity 


LOC "active" 
GS "active" 


Approach Stabilization 


» > v app + 10 or v < v app 


e loc > 1/3 dot 


e gs > 1 aot 


h>2000 fpm and 1000 ' <h<2000 ' AFE 
>1000 fpm 300 ' <h<1000 ' 

> 700 fpm h< 300' 


Altitude Callouts 


h = 


1000' AFE 
= 500' AFE 

= DH + 100 ' 
= DH 


Callout 


"localizer capture" 
"glide slope alive" 




"speed kts fto*} 


dot {rigU” 




" sink rate 


"1000 feet" 


" 500 feet" 

"approaching miniirums" 
" minimums” 
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Table 2.8: Summary of Checklist Items Presented 

In Time Line Analysis 



Altitude 


Challenge 

Response 

Phase 

Range 

Item 

By 

By 

Descent 

18000-10000 

1 . Fuel Panel "set" 


S/O 



Hydraulic System B 
Pump n "ON" 

— 

S/O 



2 . Pressurization "SET" 

— 

S/O 



3, Pack Cooling Doors "OPEN" 

— 

S/O 



4 . Shoulder Harness "ON" 

S/O 

C, F/0 



5 . Landing Data Card 

— 

S/0 



"COMPUTED" 





6. CSD Temp. Switches "IN" 

— 

S/O 

Initial 

Approach 

3500-OM 

1. Continuous Ignition "ON" 

S/0 

F/O 



2. Seat Belt "ON" 

S/0 

F/O 



3. Alt., Fit. & Nav. Insts. 

S/0 

C, F/O, S/O 



"SET/CROSSCHECK" 





4. RA/Baro Alt. Bugs "SET" 

S/0 

C. F/O, S/O 



5. Airspeed & EPR Bugs 

S/0 

C, F/O 



"SET/ CROSS CHECK" 



Final 

OM-TD 

1. No Smoking "ON" 

S/O 

C 

Approach 


2. Landing Gear "DOWN, IN, 

S/0 

C 



3 GREEN LIGHTS" 





3. Flaps "30°, GREEN LIGHT" 

S/O 

F/0 



4. Anti-skid "CHECK" 

— 

S/0 



5. Hyd. Pressure & Quantities 

— - 

S/O 



"CHECK" 
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It is important to note that, in contrast to flight management 
and callout tasks which can be located fairly precisely on the 
chart with respect to objective states of the aircraft, checklist 
tasks can be located only approximately with respect to mission 
time. This results from the fact that their execution under real 
operating conditions varies with such factors as flight time and 
profile, cockpit tempo and workload, and crew characteristics. Our 
time-line depicts three characteristically different conditions of 
checklist execution which can occur: (1) a "late" start and normal 
execution of the Descent checklist; (2) a "normal" execution of 
the Initial Approach checklist with interruption for heading, 
altitude and throttle changes; and (3) an early start and "normal" 
execution of the Final Approach checklist. 

The oime-line analysis considered crew activity under both a 
standard approach procedure (SAP) and a monitored approach 
procedure (MAP), and the following two subsections discuss these in 
more detail. A third subsection following details the missed 
approach procedure, applicable to either SAP or MAP time-lines. 

In our presentation of "events" on the time line, we have 
attempted to maintain a certain rigor in the vocabulary used for 
describing individual and crew tasks and sub-tasks. A summary of 
the terms in this vocabulary and of intended meanings is presented 
in Table 2.9. 
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Table 2.9: Summary of Procedural Terms Used in Timeline 


Term 

Meaning 

Example 

Acknowledge 

Notify ATC of receipt of information/ 
instructions 

"Acknowledge" ATC 

Adjust 

Alter position of control to satisfy 
criterion 

SB Lever "Adjust"* 

Announce 

Verbal indication of guidance system/ 
vehicle state or milestone 

DH "Announce" 

Begin 

Initiate change in heading 

Turn to HC "Begin" 

Check 

Verbal confirmation of desired condition; 
usually combined with term "set" 

Flaps "Set," "Check" 

Complete 

Compute 

Terminate checklist procedure 

Perform table-look-up/arithmetic 
operations 

Final Approach Checklist 
"Complete” 

Landing Data Card 
"Compute" 

Confirm 

Verify required instrument/control/position 
indication 

LOM altitude "Confirm" 

Crosscheck 

Verify correspondence between instruments 

Altimeters "Crosscheck" 

End 

Terminate change in heading 

Turn "End" 

IN 

Used to indicate active device 
Synonymous with ON 

"Down, In, 3 Green" 

Monitor 

Scan instruments for out-of-tolerance 
conditions 

Hydraulics, Brakes 
"Monitor" 
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Table 2.9 (cont) : Summary of Procedural Terms Used in Timeline 


Term 

Meaning 

Example 

OFF 

Used to indicate an inactive device; 
Synonymous with OUT 

Gear and Door Lights "OFF 

ON 

Used to indicate an active device; 
Synonymous with IN 

Shoulder Harness "ON" 

Request 

Command execution of procedure or 
satisfaction of a condition 

Flaps 25 "Request" 

Set 

Position a control/bug at a desired value 

Flaps 30 "Set" 

Start 

Initiate checklist procedure 

Final Approach Cnecklist 
"Start" 

Trim 

Alter configuration to achieve desired 
sink rate 

Altitude "Trim" 


*NOTE : Speed Brake (SB) adjustment is not required on all versions of the 727. 
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2.2.1 Standard Approach Time-Line 


A standard approach procedure was defined in accordance with 
procedures used by U.S. carriers during CAT I approaches. The SAP 
was defined so as to include the following procedural elements, in 
addition to those detailed earlier: 

1. No transfer of vehicle control is made, so that one pilot 
is always the PF, the other always the PNF. 

2. Both pilots are "head-down" on instruments, no later than 
the outer marker. 

3. The PNF begins to search for external visual cues, at no 
later than a specified "search height" (SH) , while 
continuing to monitor the instruments. 

4. If, before the decision height (DH) , the PNF acquires an 
adequate view of the runway, and determines that a normal 
approach to landing can be made solely on the basis of the 
external visual cues, the PNF announces "runway in sight," 
and returns to instrument monitoring. If the PNF acquires 
an adequate view of the runway, but decides that a normal 
approach to landing cannot be made (either because of 
vehicle positioning or anticipated deterioration of the 
visual environment), the PNF announces "missed approach," 
and returns to instrument monitoring. 

5. If the PF hears "runway in sight," the PF directs his 
attention to the external visual cues and continues the 
approach. If the PF hears "missed approach," the PF 
initiates the missed approach procedure. If the PF has 
heard neither of these announcements by the DH, the PF 
announces "missed approach" and initiates the missed 
approach procedure. 

6. If the PF has switched his attention to the external 
visual cues, and determines that a normal approach to 
landing cannot be made (because of vehicle positioning or 
visual cue inadequacy), the PF announces "missed 
approach," and initiates the missed approach procedure. 
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The standard approach time-line is shown in Table 2.10, and is 
arranged in columns, with time-to-go (to touchdown) running 
vertically down the page. The left-hand columns show time-to-go 
(TGO) , ground range-to-go in the localizer plane (R) , altitude (A) , 
velocity (V), and heading (H) * Units are those identified in 
Table 2.5. The middle columns show procedural activity by each 
crew member (Captain, First Officer, and Second Officer); it is 
assumed here that the Captain is the PF, and the First Officer, the 
PNF. The last column shows significant event occurrences, and 
identifies ATIS and ATC communications. 

This last column also identifies what might be labelled as 
"triggering events" which lead to a specific crew action in 
response to the event. As an example, the time-line shows a flaps 
15 request by the PF at tg Q = 955 sec; the corresponding triggering 
event is shown in the right hand column: the vehicle velocity 
reaching 170 kts (V = 170), after having undergone a deceleration 
from 190 kts. Responses triggered by ATC requests are similarly 
shown. For example, at tg Q ■ 500 sec, the PF initiates a turn to a 
270 deg heading, an action triggered by the ATC heading request 
shown in the right-hand column, in this case, the parentheses 
indicate that the actual request was made earlier, at 
tg Q e 1010 sec. 
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A/V /H 


Initial Conditions: 


Captain <PF) 


Baro iltiafter 
"Set, Crosscheck" 
at 18,000 

Altitude Alert "Set" 
to 10,000 


First Officer (PNF) Second Officer (SO) Barkers, ATIS, 

ATC , A/V/H 
Milestones 

Baro. Altineter 
"Set, Crosscheck" 
at 18,000 


■•••■« DF SCENT****'**"* a ** >> **** 1 ’ »»••*• 

1500/ 10000/190/210 Altitude Alert "OFF" 


As 10000 


Descent Checklist 
"Bequest" 


01. Shoulder Harness 
"OM" 


D1. Shoulder Harness 
"OH" 


Inboard Landing Lights 
"OH" 


Table 2.10: Standard Approach Time-Line 


Descent Checklist "Start" 
D1 . Shoulder Harness? 


D2. Fuel Panel "Set* 

t. All aaln tank 
fuel boost 
snitches "OH* 

2. All crossfeed valve 
selectors "Set" in 
accord with Fuel 
nanagenent Procedures 

D3. Hydraulic Systems 
"Check" 

1. Hy. Sys B punp fl 
switches "ON" 

2. All pressures (incl. 
brakes) and quantities 
normal 

3. All low pressure 
lights "OFF" 

DA, Pressurization "Set" 

1. Cabin Altitudes set to 
200* below AE 

2. All pressures (incl. 
brakes) and quantities 
normal 

D5. Pack Cooling Doors 
Open 
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Landing Data "Check, Set" 

1. Set VBUG (13") 

2. Set EPR bugs to G/A 

3. Set other Airspeed 
as desired 


Cabin Announcements 
and Company 
Communications A/H 

Final Briefing "Start" 

1. Runway to be taken 

2. Type of approach 

3. MAP course 


Cabin Announceaents 
and Company 
Communications A/A 


Final Briefing 
"Complete" 


10 WH 1 /I 90/210 Continuous Ignition 

■OR" 


D7. Landing Data Card 

"Compute" and "Paas* 
to Captain 

1. Transcribe ATIS I.D.. 
wind, temp., baro., 
and RHT selected 

2. Compute GHT and VREF 
030) 

3. Compute VBUG (13") 

I. Transcribe G/A EPR's 

DB. "Set" CSD Temp 
Switches "In” 

Descent Checklist 
"Complete" 


Cabin Announcements 
and Company 
Communications A/H 

ATIS: 

1. HVH 

2. Turbulence 

3. Wind Speed 
Hind Direction 

5. Alt. Setting 


Fuel Heat "Adjust" 
A/R 


ATC : HCs270 
VC = 170 
AC s3500 


"Acknowledge" ATC 
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27- 


f 


1000/ 


10000/ 190/? 10 


"Set" Altitude 
Alert to 3500 ’ 

Turn to HC "Begin" 

3 deg/see turn rate 


(HC=270) 


970/ 


10 000/ 190/? 70 


Turn "End" 
Maintain ?70 deg 


11*270 


Throttle "Adjust" 
Adjust to make VC 


(«C*170> 


955/ 


10000/170/770 


950/ 


10000/170/770 


Flaps 15 "Bequest" 


Throttle "Adjust" 
Set to Might idle 

Altitude "Trln" 
Trii* for 1800 Fpn 
sink rate 


Flaps "Set, Check* 

1. Observe flap 
placard speeds 

2. Hove Flap handle 
<to 15 deg) 

3. Check light 
Indications against 
flap handle setting 


"Announce".,. "Out of 
10000 for 3500" 


7*170 


(AC *3500) 


miitlHITiAt APPBOACH** •*•*•••*■• *•■#*•***• ••••*•**•■•**•*••■••*■■•■■*•«*•**■■• aeassssavasseseaseeassaseaaeesssaeaaasveeseeaeese 


730/ 


3500/ 170/P70 


Initial Approach 
Checklist "Bequest" 

Altitude Alert "OFF" 

Throttle "Adjust" 

Set For level FI ight 


As 3500 


Initial Approach 
Checklist "Start" 

11. Continuous 
ignition? 


595/ 


3500/170/770 


"Acknowledge" ATC 

II. Continuous 

Ignition "OP" 


ATC : VC *160 


-CA*. 


1-Mi taim* - M li wnw A M 




rttfi i iliitlfll 
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12. Scat Belt? 


*90/ 1500/170/270 Throttle "Adjust" 

Adjust to wake VC 


12. Seat Belt "OB" 


*80/ 1500/1*0/270 Throttle "Adjust" 

Set for lerel flight 


IJ. Alt., Flight and 
Ba* Instruaents? 


5 TO/ 3500/1*0/270 


"Set" Altitude 
Alert to 2000' 


"Acknowledge" ATC 

13- Alt., Fit. and 
Her Instruaents 
"Set, Crosscheck" 

1. Check Tor warning 

nags 

?. Check for Instruaent 
agreeaent 
3. Check If 
B. Conflra VOB/AOF 
selec tors/switches 
for proper position 
5. Conflra (Ml Ml 
switch positions 


561/ 1500/1*0/270 Turn to HC "Begin" 

1 deg/sec turn rate 


521 / 1500/160/180 Turn "End" 

Maintain 180 deg 


Throttle "Adjust" 
Set to flight idle 

Altitude "Trla" 
Trie for 900 fpa 
sink rate 

"Acknowledge" ATC 


(VC = 160) 


ATC: 

HCalSO 

AC <2000 

HC « 120# A =2000 


(HC s 180) 


(AC =2000) 


ATC: 

1C -90 BLOC 
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>t" Altitude Alert 


AT 3/ 2000/160/IBO Altitude Alert "OFF" Aa2000 

Throttle "Adjust" 1A. BA/ Bar o Alt. Bugs? 

Set for level flight 


Turn to NC "Begin" (HC = 120FA=2000) 

3 deg/ sec turn rate 


AA 3 / 2100 / 160/120 Turn "End" Ha 120 

Maintain 120 deg 

CPUS switch "Check" 1A. RA/Baro Alt. Bugs 

verify NORMAL setting "Set” 


• grygoAC •!*■•* •■****■***"**■****•■■*•■*■•*■•****■***********■**■■■**********■**■■*■■■■**■■*■*■*■■*■■■■***■*•**■*•■*■■■■ 


313/ 

2000/160/120 

Turn to HC "Begin" 

0.5 deg/sec turn rate 

"Announce" . . . 
"Localizer Capture" 

LOC active 
(HC*90#L0C) 

332 /BOB 10 

2000/160/ 90 

Turn "End" 
Maintain 90 deg 

15. Airspeed 4 EM Bugs 

on LOC 



SB Lever "Adjust- 
Turn SBL Down 

15. Airspeed A EPR Bugs, 
"Set, Crosscheck" 



Initial Approach Checklist 
"C caplets" 


Altitude Alert "Set* 
Set to A500 
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\ 


5ji ponn/no/ *>f> 

?T '- ' 1 Throttle "Adjust" 

»- 1 |u it to 150 kts 

?*?. 1 /hPton pooo/IS'./ 90 Flaps ?•> "Request" 


Throttle "Adjust* 

Set for level f 1 Ight 


?l» .T/SOHOO ?00f»/lS0/ 90 Gear IViun "Request" 

"Trim* to Intercept CS 


I 

U» 

0 

1 


SB Lever "Arm" 

1 . >t lever to "ana" 
7 . Confirm "armed" 
light "on" 


do Smoking Signs 
"Od" 


Antiskid "Od 


"Announce 
A I Ive* 


■01 Ideslope 


AS active 



9*150 

Flaps "Set. Check" 

1. Observe flap 
placard speeds 

2. Hove flap handle 
(to ?5 deg) 

3. Check I ight 
Indications against 
flap handle setting 


1/? dot below CS 


Gear Down "Set, Cheek* 

1. lower Gear 
7 . Confirm gear down 
(green lights "Od") 

3 . Confirm red Gear 
and Poors 
lights "OFF" 

Hydraulics, Brakes 
"Honllor* 


SB "Confirm" 
Confirm "armed" 
light "on" 
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Final Approach 
Checkl l*t 


I 


igo.?/ iioan tGto/mn/ oo 


FP. ffown fn , } Green 


Thrd tl e "AOJuM" 

A<1juM. to «afce 

Isn't) rut flap spee<t * G” 


* mo . o/ 1 ft «(> ts r ,o/t*0/ on Landing Flap* "F»«|ue*t" 

lei i jo .*.•*) 

t~* 

I 


Throttle "AOJiial* 
At)u*t to »Arr 
f 1 10 Hsl 



ia9.o/3*ip90 


11)50/ 1 39/ 90 


LOH fix " Announce' 


"Set" Altitude Alert 
to HAP alt. 


10A.il/PM0A0 1000/139/ 90 




Final Approach 


a? 

(D 

Checklist "Complete" 


•o 



O 



hi 

LOH alt. "Ccnfirra" 

ft 

(LOH alt . sIMSO et.) 


Z 


o 


1000' "Announce" 
Instruments Crosscheck 


1000* AFE 



DH "Confirm" (POO’) 


t 


500' "Announce" 
Instruments Crosscheck 


500* AFE 


500’ "Announce" ..... 

Approach Stability Approach Stability 

"Monitor" "Monitor" 

I. Announce any 
indications of 
approach 
destab ill zatlon 
(sink rate, power 
changes, sink rate 
variations) 

P. Announce LOC , CS 
deviations 


500' AFE 




15.1/ 5010 


100/139/ 90 


30.?/ 5550 ?50 / 1 39/ 90 


?7 . 7 / 5?go ? ?5 / 1 79 / 70 


?5 .?/ 57?0 ?00/ 1 39/ 70 


15-3/ 3130 100/139/ 90 Throttle "Adjust" 

( Adjust to VBUO <13A) 

U> 

Od 

I 

10.3/ ?=>9 0 50/13h/ go Throttle "Adjust" 

Flare to touchdown 


0/0 0/1 ifl/ 90 



Approaching Hin lamas 
"Announce" 


Approaching Kinlauas 
"Con f Ira" 


DH.100' (SH) 


1 

1 



t I 


Runway- 1 n-SIght ?50 ' AFE 

"Announce" 


Hlnlnuas "Announce" 


100* AFE 


RM Threshold 


TO 
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Checklist items are identified by a letter code to indicate 
Descent (D ) , Initial Approach (I) , or Pinal Approach (F) . In 
addition, items within a checklist are numbered according to the 
sequence of their execution, and items requiring crew interaction 
are tagged by corresponding letter-number pairs. This tagging thus 
provides a linkage between checklist queries by one crew member and 
corresponding responses by one or both of the other crew members. 

The time-line presumes that the vehicle "breaks out" at 250 ft 
AFE, and that, from this point on, the visual cues are adequate to 
continue the approach and to land the vehicle. It is also assumed 
that the PNF begins his search for runway cues at a search height 
100 ft above DH, acquires those cues at the breakout altitude, and 
makes the appropriate runway- in-sight call. Although not shown on 
the time-line, it is also assumed that, at this point, the PNF 
returns to instrument monitoring, while the PF transitions to the 
external runway cues, and lands the vehicle. 

2.2.2 Monitored Approach Time-Line 

A monitored approach procedure was defined in accordance with 
procedures used by some U.S. carriers during CAT II approaches. 
The MAP was defined to have most of the procedural elements of the 
above-described SAP. The exceptions are the SAP procedures given 
in the preceding subsection; the following MAP procedural elements 
are defined to replace them: 
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1. A potential exists for transfer of vehicle control, so 
that PF and PNF roles can change. For ease of discussion, 
we assume here that the captain (CAPT) is initially the 
PNF, and the first officer (F/0) is initially the PF, 

2. Both pilots are "head-down" on instruments, no later than 
the outer marker. 

3. The CAPT (PNF) begins to search for external visual cues, 
at no later than a specified "search height" (SH) , while 
continuing to monitor instruments. 

4. If, before the DH, the CAPT (PNF) acquires an adequate 
view of the runway, and determines that a normal approach 
to landing can be made solely on the basis of external 
visual cues, the CAPT (PNF) announces "taking control," 
takes over vehicle control, and continues the approach (as 
the PF) . If the CAPT (PNF) acquires an adequate view of 
the runway, but decides that a normal approach to landing 
cannot be made (either because of vehicle positioning or 
anticipated deterioration of the visual environment), the 
CAPT (PNF) announces "missed approach," and returns to 
instrument monitoring. 

5. If the F/0 (PF) hears "taking control," the F/0 (PF) 
relinquishes vehicle control, and continues to monitor the 
instruments (as the PNF) . If the F/0 (PF) hears "missed 
approach," the F/0 (PF) initiates the missed approach 
procedure. If the F/0 (PF) has heard neither of these 
announcements by the DH, the F/0 (PF) announces "missed 
approach," and initiates the missed approach procedure. 


Since the MAP differs from the SAP only in the last few 
hundred feet of the approach, we show the MAP time-line, in Table 
2.11, to start from the SH and proceeding to TD. The MAP time-line 
for events prior to this time would be identical to that shown for 
the SAP in Table 2.10, with the flying duties of the Captain and 
First Officer reversed (i.e., CAPT is PNF and F/0 is PF) . 
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TOO/P 


>5 . ' / PC’ 10 


30. >/ 5S50 


>7.?/ 5>39 


?5.?/ 57>9 


IS.?/ »«30 


10 . 3 / >>90 


0/0 


A/V/H Captain 


First Officer Second Officer fSO) Markers, ATIS, 

ATC, A/¥/H 
ai lestones 


300 / 130 / 00 Approaching Hintaua-S 
** Annount'** 


DHelOO* <SM) 


Approaching Miniauas 
"Verify" 


>00/130/ 00 P'jn way - in -Sight 

" Announce" 


250' AFE 


>>5/139/ 90 Control "Takeover" 


Control "Relinquish" 


>00/130/ 00 


Minlauas "Announce" 


DH 


100/130/ 00 Throttle "Adjust" 

Ad Jus t to VBUO (1 ?» ) 


100* AFE 


50/139/ 00 Throttle "Adjust* 
Flare to touchdown 


RW Threshold 


0/13"/ 00 


TD 


Table 2 . 11 : Monitored Approach Time-Line 
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As with the SAP time-line, a "break out" altitude of 250 ft 
AFE is presumed. It is also assumed here that the CAPT (PNP) 
begins his search for runway cues at a search height 100 ft above 
DH, and acquires those cues at the breakout altitude. After making 
the appropriate takeover call, the CAPT takes control of the 
vehicle from the F/O, who remains on instruments to monitor the 
CAPT's approach progress. 

2.2.3 Hissed Approach Procedure 

Since neither of the above time-lines required the execution 
of a missed approach, the associated procedure is not called out. 
The procedure is detailed, however, in Table 2.12, which shows the 
specific control actions involved in the procedure, and the 
predicating conditions for their execution. The first condition is 
simply an affirmative decision to execute the overall procedure. 
The affirmative decision is followed by an immediate application of 
power and a change in pitch to 10 deg nose-up by the PF. These 
actions are followed by a request to the PNF for retraction of 
flaps to 25 deg. When a positive rate of climb has been 
established, PF requests gear retraction by PNF, and later, at an 
airspeed of (VBUG + 10), a retraction of flaps to 15 deg. In the 
event that airspeed reaches (VBUG + 10) before a positive rate of 
climb is attained, the latter two steps are performed in the 


reverse order 


Bolt Beranek and Newman Inc. 


Report No. 4374, 


Table 2.12: Missed Approach Procedure 


Condition 


Action 

1. decide to execute 

i 

1 

► 

i) apply "go-around" thrust* 

missed approach 


ii) pitch up to 10 deg 
nose-up attitude 

iii) retract flaps to 25 deg 

2. attain positive climb 


retract gear 

rate 



3. attain airspeed of 


retract flaps to 15 deg 

( VBUG + 10) 



* according to landing data 

card EPR values 


38 
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During execution of a missed approach* it is assumed that all 
actions concerned with thrust and attitude management are made 
directly by the PP and that all actions concerned with control 
surfaces and gear are made by the PMP on request by the PP. 

The decision to execute a missed approach is less well-defined 
than the procedure itself. However, a set of general conditions 
can be specified for defining when the procedure should be 
executed, and these are* 

1. Vehicle altitude is less than FH ft AFE, and a failure is noted 
in either a flight instrument or an ILS instrument component. 

2. The vehicle is within the OM, but not stabilized on the glide 
slope. 

3. An adequate view of the runway is acquired before DH, but a 
normal visual approach-to-landing cannot be made, either 
because of vehicle positioning with respect to the runway, or 
because of anticipated deterioration of the visual environment. 

4. An adequate view of the runway is not acquired by the time the 
vehicle reaches DH. 

The first item above leaves unspecified the "failure height" 
ceiling (FH) , but it would appear that 500 ft AFE would be a 
reasonable value. Instrument failures relating to this condition 
would be either "hard" failures, where the nature of the failure is 
obvious, or "soft" failures, such as might be associated with an 
instrument disagreement between crew members. 


- 39 - 


Report No. 4374 


Bolt Beranek and Newman Inc 


The second item presumes that stabilization requires the 
vehicle to be within a specified approach "window,” defined along 
specific position, velocity, and attitude coordinates. The 
position window is defined in terms of localizer deviation, glide 
slope c aviation, and altitude deviation (from a given nominal 
range-dependent altitude) ? the velocity window in terms of 
deviations from the nominal approach speed and sink rate; and the 
attitude window in terms of roll, pitch, and yaw deviations from 
nominal trim values. Implicit in this window definition is that 
the rates-of-change of these variables are also within specified 
limits, to ensure stabilization throughout the entire course of the 
approach. 

The third item requires that two conditions be met for 
continuing the approach. First, the runway view must be clear and 
detailed to an extent which would allow for an approach and landing 
utilizing only out-the-window cues. This implies that possible 
future deterioration of the visual environment must be considered, 
since a later loss of out-the-window cues would preclude a visual 
landing. Given an adequate visual environment, a second 
requirement is that the vehicle be within an approach window which 
is sufficiently small to allow for a normal approach and landing. 
As in the previous item, a multi-dimensional window is presumed, 
with sufficiently narrow tolerances to ensure sufficiently accurate 
touchdown footprints with a minimum of vehicle maneuvering. 
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The final item precludes a continued approach below DH, 
without the prior acquisition of an adequate out-the-window cue 
set. It presumes that no further attempt will be made to acquire 
the runway environment, and that a missed approach will be executed 
in a timely manner. j 

i 

i 

! 
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3. PROCRUl A MODEL FOR ANALYZING FLIGHT CREW PROCEDURES 

The task that has just been described involves a wide range of 
human behaviors and activities, both cognitive and 
perceptual-motor. These include monitoring and 
information-processing, flight control, decision-making, execution 
of standard procedures, and communication with other crew members 
and with ATC. The goal here was to develop a model for this 
complicated process that would provide a means for systematic 
exploration of questions concerning the impact of procedural and 
equipment design and the allocation of resources in the cockpit on 
performance and safety in approach-to- landing. 

Given the objectives we have for the model and the nature of 
the issues we hope to analyze with it, several general implications 
for modelling the task emerge. First, it is clear that a system 
model is needed; one that accounts for the interactions of crew, 
procedures, vehicle, approach geometry, and environment. Second, 
the issues of interest revolve principally around allocation of 
tasks in the cockpit and crew performance with respect to the 
cognitive aspects of the tasks. The model must, therefore, deal 
effectively with information processing and decision-making aspects 
of human performance. Third, despite the high cognitive content of 
the approach task, a large portion of the crew's activities 
involves highly structured, standard procedures. These must be 
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modelled at a level that Is adequate for determining how 
performance on these tasks interferes with other tasks (and 
vice-versa) and for evaluating the consequences of failure to 
execute important procedures. Fourth, communication among crew 
members and between the crew and ATC must be considered in the 
model, at least with respect to accounting for the transfer of 
information and the load imposed by such communication. Finally, 
to examine the impact of various system conditions and assumptions, 
it must be possible to compute performance parameters of interest. 
Moreover, for analysis purposes, it will be very useful to maintain 
an estimate of the information possessed by each member of the crew 
at each instant in time. This will allow evaluation of the 
information upon which decisions are made in the model. In 
addition, it may provide an implicit performance metric (not 
measurable in a simulation) for evaluating various approach 
procedures. 

PROCRU (Procedure Oriented Crew Model), is a simulation model 
for examining crew procedures in approach to landing, developed 
with the above requirements in mind. It includes a system model 
and a model for each crew member. The crew is assumed to be 
composed of three members: pilot flying (PF) , pilot not flying 
(PNF) and second officer (SO). In the present implementation of 
PROCRU, the SO model does not include any information processing or 
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decision~making components. Rather , the SO is modelled by a purely 
deterministic program that responds to events and generates 
requests. PP and PNP, on the other hand, are each represented by 
complex human operator models which have the same general form but 
differ in detail. The basic structure of the PROCRU model for PP 
or PNP is illustrated in Pigure 3.1. In the remainder of this 
chapter we describe the elements in that structure. 

3.1 System Model 

3.1.1 Vehicle Dynamics 

The representation of vehicle dynamics must be sufficient to 
capture the essential aspects of the task but there is an inceitive 
(computational cost) to keep it as simple as possible. Certainly, 
the equations of motion must be adequate to describe the position 
and velocity of the aircraft relative to the nominal approach path, 
but for the Issues to be addressed here linearized equations can be 
used and inner-loop (high-frequency) dynamics ignored, to a first 
approximation. Thus, we use as a basis for the dynamic 
calculations the following standard point mass equations for the 
vehicle trajectory: 

e 

mV ■ T cos a - mgsin Y - D( a ) 

(mVcos Y )i> • (L( a ) + T sin a ) sin# (3.1) 

mV Y « (L( a) + T sin a ) cos $-mg cos Y 
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SYSTEM 




PILOT 
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ANCES 


CONTROL INPUTS 


VEHICLE 

DYNAMICS 


1 


SUBSYSTEMS 


VEHICLE 

STATE 


EXTERNAL 

VISUAL 


MONITOR 

REQUESTS 


(atc/crew^ 


SUBSYSTEM 

STATE 


INSTRUMENT 

VISUAL 


*€ 


1 


COMMUNICATIONS 


AUDITORY 


I) 


MONITOR 


SHORT TERM 
BUFFER 


("information processor" 

1 r— 


STRESS 


STATE 

ESTIMATOR 
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h « Vsin Y 

• 

x » Vcos Y cos ^ 
y » Vcos Y sin V 

where the variables are defined as 

V: velocity 

heading 

Y: flight path angle 

x: distance north from the glide slope transmitter 

y: distance east from the glide slope transmitter 

hs altitude above the runway (assumed to be at zero 
elevation) • 

L: Lift (function of angle of attack) 

D: Drag (function of angle of attack) 
a; angle of attack 
4): bank angle 

T: Thrust 

These equations may be written in the general form 

X « f (X,U,t) (3.2) 

where X = (V, ip,Y ,h,x,y) is the vehicle state vector and D * 
(T, <t> , a ) is the control input. 


- 46 - 


Report No. 4374 


Bolt Beranek and Newman Inc 


The scheme utilized to "integrate" the above equations and to 
provide the linearized equations needed for implementing the 
control and estimation portions of PROCRU is somewhat novel and, we 
believe, is in keeping with the manner in which approach 
trajectories are flown. It is described in detail, specifically 
for Eqn. (3.1), in Appendix C. Briefly, five "nominal trajectory" 
segments, corresponding to five standard maneuvers, are defined: 

1) straight and level flight ("S & L") 

2) deceleration at constant flight path angle and heading 
("DECEL") 

3) turn at constant rate, airspeed and altitude ("TURN") 

4) flare constant rate of change of flight path angle at 
constant speed and heading ("FLARE") 

5) descend at constant sink-rate, airspeed and heading 
("DSCNT" ) 


It is possible to determine, algebraically, for each maneuver, the 
"trim" or "nominal" controls Ujj, necessary to achieve the desired 
condition and, moreover, to integrate the corresponding equations 
of motion exactly to obtain Xjj(t) (See Appendix C) . The equations 
can then be linearized about the particular segment to yield 
equations of the form 


where 


* - ha^L + Iwi “ 


(3.3) 
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X(t) * X Ni (t) + x(t) 

U(t) = U» (t) + u(t) 

9f I 1 f. 

A N a ~ 3x|Nj/ B N a “ U|Nj 


(3.4) 


and the subscript N^ means that the quantity is evaluated along the 
i*th nominal segment. 


We note that it is not necessary for a nominal segment to 
start at a particular place (see discussion of procedures below) . 
In addition, because the system matrices change from segment to 
segment (and from moment to moment in a TORN segment) , the 
linearized equations (3.3) will be time-varying (piecewise 
constant) over the approach trajectory. Finally, we may generalize 
Eqn. (3.2) to include wind and other possible disturbances by 
rewriting it as 

* = * + 5 ^- + ^ + ^N^i <3 * 5) 

where W N , is a zero-mean white noise with covariance and Zjj, is 
a deterministic disturbance that is unknown to the pilot. Eqn. 3.5 
is in a form that is standard for applying the Optimal Control 
Model (OCM) of the human operator [2]. 


3.1.2 Subsystems 

Aircraft subsystems, such as engines, hydraulics, etc., are 
not modelled in any detail. Subsystem operation, when required by 
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procedures, is accomplished, or not, as determined by the models 
for the crew. (See discussion of procedures and displays) . 

3.1.3 ATC Communications 

Air Traffic control vectoring commands are preprogrammed as 
part of the approach scenario. They take the form of auditory 
guidance commands, to be processed and executed by the PF. 

3.1.4 Instrument Landing System 

The instrument landing system model includes the glide slope, 
localizer, outer marker and middle marker. Computed vehicle 
position is used to compute "activation" of any of these ILS 
signals and to determine glide slope and localizer errors in "dots" 
(See Appendix B) . ILS transmitter positions are as indicated in 
Chapter 2. The model does not presently include any beam errors 
but these could be added without difficulty. 

3.1.5 Information Sources 

We assume that four basic sources or "clusters" of 
information are available to a crew member: external visual scene 

information, visual information concerning vehicle state from the 
flight instruments, visual information concerning subsystems and 
auditory information. 
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The information from the external visual scene depends on the 
position and attitude of the aircraft relative to the airfield and 
on the weather. Geometric analysis allows us to define how the 
"displayed" quantities, yg, depend on vehicle state and scene 
content (see Appendix D) . Previous analyses of manually controlled 
approaches with visual scene information using the OCM have been 
performed fairly successfully with such a representation 13,4). 

The information on the instrument panel, yj, can relate to 
vehicle status information (from flight instrumentation) , command 
information (from flight directors) and subsystem information 
(including subsystem status and visual "alarms”) . The information 
may be discrete as well as continuous. We assume this information 
is separated into two clusters, one for vehicle state- related 
information, and one for subsystem information. For the 
PROCRU analysis conducted herein, the flight displays are assumed 
to indicate airspeed heading, altitude, rate-of-climb and, after 
beam intercept, localizer and glide slope error. The subsystem 
displays are not modelled with respect to information content but 
serve as an attention distraction or "sink" when a procedure 
requiring subsystem operation is being performed (see below). 

Auditory information includes command information from ATC, 
auditory alarms, and communications from other crew members such as 
callouts, requests, etc. 
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3.2 Human Operator Models 

The model for the human operator (PP or PNP) contains 
submodels for monitoring, information processing, decision-making 
(procedure selection) and action. These are discussed below. 

3.2.1 Monitor 

The monitor sub-model accounts for the operator's sensory 
limitations as well as for monitoring decisions (i.e., allocation 
of attention) . The visual sensory limitations are modelled in the 
same manner as in the OCM [2,3], except that the perceptual delay 
is neglected. In particular, an observation noise and a threshold 
are associated with each observed visual quantity. The thresholds 
are important for external visual scene perception; for example, in 
limiting the quality of available vertical guidance information. 
Thus, if yj. and correspond to displayed information concerning 
vehicle state from the external scene or instruments, respectively, 
then 

yg(t) - Cg x(t) + Vg(t) 

y x (t) = Cj x(t) + Vj(t) (3.6) 

where and Vj are white, zero-mean gaussian noises with the 
autocorrelation of Vg given by 
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where 


E 




(t)<5Ct-s)6 jk 


(3.7a) 


| f E j = 


(3.7b) 

N w = erfc [ 

Ej 

|y E j(t) |/3j fi] 

(3.7c) 

v Ej <« " + 

E i Y E 1 2 ^ t, f 

(3 ,7d) 

00 

/ 6 (t-s)ds * 1 

t=s, 0 otherwise 


•00 

6 11 

i= j , 0 otherwise 

(3.7e) 


The quantity f E in (3.7a) is the attention devoted to cluster E 
(i.e., external scene) and f E . is the attention to the j-th 
"display" in that cluster. N E ^ is the random input describing 
function for a threshold with value aj. The base observation noise 

covariance V E (t) has a constant component V E ° as well as a portion 
that scales with the signal; P E is the noise-to-signal ratio. A 

similar set of expressions holds for the autocorrelation and 
autocovariance of Vj. 

Auditory information is assumed to be heard correctly. It is 
stored in a memory buffer for subsequent processing. 


The operator cannot process all sources of information 
simultaneously and must, therefore, decide which sources to "attend 
to." In the case of visual information there is a fundamental 
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choice as to where to fixate , on the external world or on the 
instrum&o£ panel. If the instrument panel is chosen, the operator 
must decide upon which instrument to fixate. We shall also assume 
that the auditory information similarly "competes” with the visual 
information for operator attention. 

Thus, we let 


f E (t) + f x (t) + f s (t) + f A (t) * l,Yt (3.8) 

where f E and fj are defined above and f g and f A are the attentions 
devoted to subsystem displays and the auditory channels, 
respectively. The quantity f g is either one or zero, depending on 
whether or not a "request" for subsystem information has been made. 
Similarly, f A is one if an auditory message is being processed and 
zero otherwise. Within the flight displays, we follow [5] and 
assume that attention is shared, and the observation noises 
modified, as indicated by (3.7a,b). The fractions devoted to 
individual flight displays at a given time are determined by the 
particular procedure invoked at that time, in a manner to be 
described later. For the moment, we simply note that if a crew 
member is observing the flight instruments and a procedure is 
activated that issues a "monitoring request" for a given display, 
then the fraction of attention devoted to that display is 
incremented to approximately full attention while the fractions 
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devoted to the remaining displays are decremented correspondingly. 

To summarize, when auditory or subsystem information is 
requested by a procedure, attention is diverted from the flight 
displays and no information concerning the vehicle's state is 
obtained (except if it comes via the auditory channel from another 
crew member). When flight displays are being observed, attention 
is assumed to be shared among the displays on a continuous basis 
instead of being restricted to a single display at a time. 
Employing this "mixed strategy" for flight display scanning appears 
to us to have considerable theoretical merit in an environment in 
which randomness is an essential part. 

3.2.2 Information Processor 

The information processor portion of the model consists of two 
sub-models, an "estimator" and a "discrete event detector". The 
estimator is identical to that used in the OCM and is a 
time-varying Kalman filter. The internal model for the filter 
changes with changes in dynamics resulting from alteration of the 
"nominal" or from flap or gear extensions or with changes in 
disturbance characteristics. In a manual approach, the PF has 
knowledge of the control inputs; non-flying crew do not have such 
information. 
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The outputs of the estimator are the estimate of the perturbed 

A 

state, £ the covariance of the estimation error, £, and, perhaps, 
the innovations sequence, and its covariance.* We will assume that 

A 

the probability distribution for x is normal, in which case x and £ 
are sufficient statistics for determining the conditional density 
of x based on past observations £, P(x|y). Thus, the estimator 

A 

produces status information, x, needed for control and ■ subjective" 
probability estimates that can be used for decision-making or 
detection. Note that the error covariance,!, is a measure of the 
operator's uncertainty in the estimate x and will be a major 
factor in determining monitoring decisions, as will be seen below. 

The discrete event detector is intended to model those aspects 
of operator information processing other than vehicle state 
estimation. Typically, it is concerned with determining or 
detecting that an event has occurred which "enables" a subsequent 
procedure execution. The event may be a failure (that did or did 
not result in an alarm) , a request for action (say from ATC) , or 
some annunciated condition (e.g., crossing OM, glide slope active 
or, passing through some altitude). The inputs to the event 
detector are outputs of visual alarms, auditory information, and 
the outputs of the state estimator. The state information is used 
to detect state related events such as an unstabilized approach 
condition. 

*In the present implementation of PROCRU, it is assumed that the 
nominal state X^t) is known to the crew. 
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Highly sophisticated models exist for certain types of failure 
detection based on state estimation, and these might eventually be 
incorporated in the event detector model (e.g.,[6]). We did not 
get so sophisticated here, however. We assume, simply, that the 
occurrence of an event is detected with a specified, finite 
probability by the crew.* However, the nature of the event is 
assumed to be unknown until the procedure for decoding messages 
(see Chapter 4) is invoked. The selection of this procedure can be 
delayed by the requirements to perform other tasks, thus delaying 
the effective time of event detection. Once the message associated 
with the event is decoded, it will generally result in the 
"enabling" or "triggering" of an appropriate procedural response. 

3.2.3 Procedure Selector 

The operator is assumed to have a number of procedures or 
tasks that may be performed at each instant. These "procedures" 
might be quite general, such as "fly the airplane" or "monitor the 
approach," or they might be quite specific, such as performing a 
particular checklist or requesting a specific flap setting; they 
are described in detail in Chapter 4. Here, we discuss the model 
for procedure selection. 

* The probability is chosen to be one for this study, for simplicity. 
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We assume that the operator knows what is to be done and, 
essentially , how to accomplish the objective. However, he must 
decide what procedure to do next. This is a decision among 
alternatives and the procedure selected is assumed to be the one 
with the highest expected gain for execution at that time. The 
Expected Gain for executing a Procedure, EGP, is a function that 
is selected to reflect the urgency or priority of that procedure as 
well as its "value". In addition, the EGP can be a function of 
the "enabling" state of the procedure. Thus, if a procedure were 
not "enabled" it would have zero gain and would not be chosen; 
if the enabling event had a non-zero probability of occurrence, the 
procedure might then be selected. 

In PROCRU, we have assumed the EGP functions have the 
following general form (specific expressions are given in Section 
4.3.3 ) t 


EGP (I) - G(I) + Gq ( I ) , 1-1, ...,N (3.9) 

where I denotes the Ith procedure, G(I) is a function that reflects 
the "situational relevance" of the procedure and Gg(I) is a 
constant that depends on the relative "value" of the procedure. 
For procedures that are triggered by the operator's internal 
assessment of a condition related to the vehicle state-vector, the 
G (I) functions are appropriate subjective probabilities, based on x 
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and £ , as determined by the information processing portion of the 
model. Procedures that are triggered by events external to the 
operator , such as ATC commands, communications from the crew, etc., 
are characterised by G's that are explicit functions of time. For 
either type of function, the gain for performing a procedure will 
increase, subsequent to the perception of the triggering event, 
until the procedure is performed or until a time such that the 
procedure is assumed to be "missed" or no longer appropriate for 
execution. 

The G 0 terms have two principal purposes. First, they are 
used to establish a "default" procedure for each operator by 
assigning a base value for EGP for that procedure that is greater 
than for any other one. (The G(I) for any other procedure must 
exceed this base value before the procedure can be selected.) For 
PF the default is flying the airplane, whereas for the PNF xt is 
monitoring the vehicle's status. The second purpose of the G 0 term 
is to establish priorities among procedures that might have the 
same situational relevance at a given time. 

Procedures may be comprised of a number of sub-procedures, so 
that at the completion of each sub-procedure, a decision to 
continue must be made. This will permit interruption of such a 
procedure, depending on the outcome of the decision. 
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We believe that this model for procedure selection captures 
many important aspects of human performance in a multi-task 
environment, and is directly relevant to investigating the efficacy 
of flight crew procedures. It allows for procedures to be missed 
and/or interrupted: even flying the airplane may be neglected, as 
can happen. Although we do not expect sub-procedural steps to be 
performed out of order with this modelling approach, it would be 
possible to preprogram such errors if desired. 

The output of the procedure selector is a choice of the 
procedure to perform next; procedure (or sub-procedure) k* is 
selected according to: 


k* - ARG MAX EGP (I) 


(3.10) 


3.2.4 Effectors 

The selection and execution of a procedure will result in an 
action or a sequence of actions. Three types of actions are 
considered: control actions, monitoring requests and 
communications. The control actions include continuous manual 
flight control inputs to the aircraft and discrete control settings 
(switches, flap settings, etc.). Monitoring requests result from 
procedural requirements for specific information and, therefore, 
raise the attention allocated to the particular information source. 
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We note that verifying that a variable is within lim'ts may not 
require an actual instrument check , if the operator already has a 
"confident" internal estimate of that variable. Communications are 
verbal requests or response' as demanded by a procedure. They 
include callouts, requests or commands, and communications to ATC. 

Associated with each procedural action is a time to 
complete the required action. {It is possible to modify PROCRU to 
allow for a probabilistic distribution of action times) . When the 
operator decides to execute a specific procedure, it is assumed 
that he is "locked in" to the appropriate mode for a specified 
time. For example, if the procedure requires "checking" a 
particular instrument and it is assumed that it takes t seconds to 
accomplish the check, then the "monitor" will not attend to other 
information for that period, (except for a minimal residual 
attention) , nor will another procedure be executed. 

In PROCRU, procedural implementation is modelled as essentially 
error free. However, errors in execution of procedures can occur 
because of improper decisions that result from a lack of 
information (quantity or quality) due to perceptual, procedural and 
workload limitations. If the effects of action errors are also to 
be analyzed, this is accomplished by deliberately inserting such 
errors directly into the model. It should also be pointed out that 
verbal communication is modelled directly as the transfer of either 
state, command or event information. 
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3.3 Summary 

In the previous sections, we have described the structure of 
the PROCRU model for analyzing crew procedures in 
approach-to-landing. The model employs the information processing 
structure used in the Optimal Control Model and in recent models 
for monitoring and failure detection. Mechanisms are added to this 
basic structure to model crew decision-making in a multi-task 
environment. Decisions are based on probability assessments and 
potential mission impact (or gain) . Sub-models for procedural 
activities are also included. Where these procedures affect 
aircraft responses or the information state of the crew, the 
effects are accounted for explicitly; where they affect sub-system 
operation, only the attentional load they impose is considered. 
Procedures can be interrupted and finished subsequently, or not 
completed at all, based on decisions made by the model. However, 
the initial implementation of the model does not permit procedural 
steps to be skipped over or reordered. 

The model distinguishes among external visual, instrument 
visual, and auditory sources of information. The visual 
perception models incorporate appropriate limitations for obtaining 
information. The auditory channel contains a buffer to allow for 
storage in memory of information until it can be processed. These 
models of the information sources, along with the monitoring and 
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information processing models, allow for investigation of issues 
related to instrument display and external viewing, and to the 
transfer of information through ATC and crew communication. 

A key aspect of the model is the actual definitions of the 
various procedures incorporated. Those are given in the next 
chapter . 
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4. DEFINITIONS OF PROCEDURES 

The definition of procedures is an essential step in 
developing PROCRU. All crew actions, except for the decision as to 
which procedure to execute, are determined by the procedures. We 
emphasize that we use the term procedure here to apply to tasks in 
general; a procedure in these terms could have considerably more 
cognitive content than might normally be considered to be the case. 
In this chapter, we describe and define the procedures currently 
included in PROCRU. An overview is presented first, followed by 
detailed definitions of procedures, a discussion of the expected 
gain functions (BOP's) and some comments on procedure execution. 

4.1 Procedure Categories and General Overview 

Table 4.1 categorizes the approach to landing flight 
procedures for the PF and PNF. For each crewman, six categories 
are shown, and for each category, specific types of procedures are 
itemized. We briefly discuss these categories and types in the 
following paragraphs. 

The vehicle control procedures assigned to the PF are broken 
down into three types: maneuvering control, regulatory control 
and retrimming control. The first involves the determination of 
appropriate maneuver rates, setting trim control values to effect 
these rates, and monitoring for maneuver termination. In effect, 
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Table 4.1: PF and PNF Procedures 


PF 


1. Vehicle Control Procedures 

a) Maneuver 

b) Regulate 

c) Re trim 

2. Request Procedures 

a) Flap request 

b) Gear request 

c) Checklist initiate requesu 

3. Subsystem Procedures 

a) Altitude alert monitor/ 
control 

b) Mi sc. subsystem monitor/ 
control 


4 . Acknowledgement Procedures j 

a) Checklist item acknowledge- 
ment I 


5. SAP/MAP Terminal Procedures 

6. Miscellaneous Procedures 

a) General message processing 

b) Landing parameter selection 


PNF 

1. Vehicle Monitor Procedures 

a) Vehicle status determination 

b) Failure detec tion, and 
identification 

2 . Callout Procedures 

a) Vehicle position callout 

b) Altitude callout 

c) Approach stability callout 

3. Subsystem Procedures 

a) Flap monitor/ control 

b) Gear monitor/control 

c) Misc. subsystem monitor/ 
control 

4. Acknowledgement Procedures 

a) Checklist item acknowledge- 
ment 

b) ATC request acknowledgement 

5. SAP/MAP Terminal Procedures 

6 . Miscellaneous Procedures 

a) General message processing 
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open-loop maneuver control provides us with a means of generating 
the "nominal" trajectory of Eqn. 3.4. Regulatory control, on the 
other hand, involves monitoring the display perturbations away from 
the nominal, estimating the corresponding vehicle state 
perturbations, and generating an appropriate perturbation control 
to control out the variations. Closed-loop regulatory control 
ensures proper execution of the desired maneuver. Finally, 
retrimming control provides a means of retrimming the vehicle after 
a flap or gear setting change has altered the vehicle trim 
conditions. 

The vehicle monitoring procedures assigned to the PNF are also 
broken down into two types: monitoring for vehicle status, and 
monitoring for event or failure detection. The former involves 
determining an appropriate monitoring strategy for attention 
sharing among the available displays, estimating the corresponding 
vehicle state, and evaluating the approach progress based on the 
current state estimate. The latter involves a similar process, but 
is centered on detecting events or failures. 

Requests and callouts made by the PF and PNF, respectively, 
involve verbal responses based on estimates of current vehicle 
status. The flap, gear, and checklist requests made by the PF 
involve determining the vehicle's approach progress in terms of one 
or more trajectory/instrument parameters, and making the request 
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based on the progress and In accordance with a well-defined set of 
request procedures. The position and altitude callouts made by the 
PNF involve a similar process. The approach stability and 
runway- in-sight (RNIS) callouts, also made by the PNF, involve the 
additional requirement of determining when the vehicle is in an 
appropriate "window" for making or not making the callout. 

Subsystem monitoring and control actions made by both pilots 
are assumed to be event driven, and involve discrete control 
actions and/or diversion of attention from flight displays for 
appropriate subsystem servicing. For the PF, servicing the 
altitude alert subsystem is distinguished from the servicing of all 
other subsystems, because of the interactive nature of setting the 
trigger point, responding to the alarm, and resetting it. For the 
PNF, the ilap and gear subsystems are called out because of their 
impact on approach progress, their unique status of being driven by 
requests from the PF, and because of the need for subprocedures 
involving validation of the request, and setting and checking of 
the subsystem involved. 

Verbal acknowledgements made by the PF and PNF are driven by 
checklist item prompts generated by the SO. These require the 
checking of an appropriate subsystem (attention-diversion) and 
making the appropriate verbal response. The PNF is also assigned 
the duty of acknowledging the receipt of ATC vector requests. 
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The SAP/MAP terminal procedures provide for appropriate 
callouts, head-up/head-down switching strategies, and missed 
approach initiation during the terminal phase of either the 
Standard Approach Procedure (SAP) or the Monitored Approach (MAP) • 
Although this category of procedures could be allocated item by 
item to the other categories, it has been found to be more 
convenient to treat it as a uniform procedural category, both for 
the purpose of modelling, and for discussion. 

The miscellaneous procedures shown are primarily for the 
purpose of modelling convenience, and are not intended to directly 
represent "by-the-book" or actual procedures engaged in by the 
crew. They include processing and decoding of verbal 
communications, auditory alarms, and discrete visual events. In 
addition, for the PF, they involve selection of appropriate landing 
configuration parameters. 

4.2 Detailed Procedure Descriptions 

In the following subsections, we present additional detail 
concerning the structure and function of the procedures just 
outlined. As is evident from Table 4.1, there is a natural 
correspondence between many of the procedures assigned to the ?F 
and PNF; as a consequence, the discussion below will be organized 
along procedural lines, rather than split between the two crewmen. 
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Before proceeding, however, it should be noted that some of 
the procedures described here differ slightly from some of those 
outlined earlier in Chapter 2. The differences are due to 
subsequent discussions with flight crew members, additional 
research with current operations flight manuals, and a need for 
semantic formalization imposed by the model programming effort. As 
will be seen in Chapter 5, these changes have little impact on the 
overall approach progress and crew activity time-line already 
presented in Chapter 2. 

4.2.1 Maneuver Procedure 

This procedure is assigned to the PF, and has as its basic 
objective the open-loop control of the vehicle's flight path. The 
sequence of functions which are required to implement this 
procedure is outlined in Table 4.2. 

The first step involves defining the maneuver: defining which 

vehicle state variable is to be changed (x) , what value is to be 
reached by the end of the maneuver (x^,,^) , and at what rate the 
maneuver is to be carried out* (x c;s , . The procedural rules for 
choosing these values are maneuver dependent, and we will discuss 
them shortly. Once the maneuver has been defined, the second step 

* This last item presupposes a constant rate maneuver , an 
assumption which was utilized in Appendix C, in the derivation of 
the nominal and perturbation equations of motion. 
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Table 4.2: Maneuver Procedure - Functional Sequence for PF 


Step 

1 

2 

3 

4 

5 

6 


Action 

Define stopping condition, maneuver rate 

Solve for trim controls (T , a , <f> ,) 

c c c 

Define appropriate regulatory weightings ( v max 
Set trim controls 

Monitor for stopping condition satisfaction 
Process next maneuver (go to step 1) 


'*cmd^ 

' Y max'* 




involves a solution for the trim controls (T c ,a c »<j> c ) needed to 
effect that maneuver. We will not detail that solution procedure 
here, but instead refer the reader to section C.7 of Appendix C, 
which outlines the basis of an appropriate algorithm. 

The third step requires a definition of the appropriate 
weightings to be used, for regulating out perturbations about the 
upcoming maneuver trajectory. A discussion of the choice of these 
weightings is deferred to section 4.2.2, where we discuss 
regulation control procedures. 
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Once the maneuver parameters have been set, the fourth step 
provides for an actual setting of the three controls to their 
desired trim settings. Once this has been done, the PP is assumed 
to transition to the regulatory control procedure, to ensure that 
the desired maneuver is followed. 

As the maneuver progresses, there is a requirement on the part 
of the PF to ensure that the maneuver is stopped at the appropriate 
point. The fifth item provides for this capability by requiring 
appropriate monitoring, estimation, and decision-making to identify 
when the end condition (x^^) has been reached. 

Once it has been determined that the maneuver has been 
completed, the PP faces one of two options: either continue along 
the flight path set up by the completed maneuver, or initiate 
another maneuver. The last step shown in Table 4.2 provides for 
those options by assuming that another maneuver will always be 
initiated, either of the type which requires a change in the 
current flight path (a maneuver in the traditional sense) or of a 
"default" type which ensures the continuance of the current flight 
path.* 


T ~If a maneuver ends' with a deviation from a commanded value of 
velocity or angle, this deviation is treated as a perturbation or 
error to be "regulated out" during the subsequent maneuver. 
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The "default* maneuver is defined by requiring that velocity, 
heading and flight path angle be held at the values achieved at the 
end of the last maneuver. Naturally, If the last maneuver involved 
a change in one of these states, executing the default maneuver 
will, at the least, require a change in the trim control settings. 
Thus , in generic form, the default maneuver has procedural 
requirements no different from any other. Table 4.2 thus provides 
for exactly the same procedural steps, except that step 5 is 
bypassed, since no explicit stopping condition is specified for the 
default. 

We now define the procedural rules for executing step 1 of 
Table 4.2, and discuss them according to maneuver type. 

Velocity Maneuvers 

Table 4.3 summarizes the velocity maneuver procedures 
considered here, in terms of the "triggering" condition for 
executing a particular maneuver, the associated maneuver command, 
and the desired maneuver rate. 

The first entry indicates that velocity Maneuvers will be 
initiated in response to ATC speed management requests. The 
commanded velocity is simply that requested by ATCj the maneuver 
rate is assumed fixed at + 1 kt/sec, depending on whether an 
acceleration or deceleration is requested. 
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Table 4.3: Velocity Maneuver Procedures 



TRIGGER 

CONDITION 

COMMAND 

RATE 

COMMAND 

1. 

ATC ACCEL/DECEL 
REQUEST 

v cmd" V ATC 

v .»+ 1 kt/sec 
cma ■* 

2. 

CFL & LOC ACTIVE 

° 150 kt 

»-l kt/sec 

3. 

'os" 1 ' 5 dot 

-140 kt 

»-l kt/sec 

4. 

e gs - 1.° dot 

-v 

app 

*-l kt/sec 

5. 

h - 150 ft 

" v thresh 

--0. 5 kt/sec 


The remaining entries correspond to flight manual speed 
management procedures. The first deceleration to 150 kt is 
triggered by two events: localizer activity and a cleared for 
landing message (CPL) from ATC. The remaining decelerations are 
state/display dependent. The approach and threshold speeds, v app 
and v thresh , are assumed to have been previously specified by the 
landing parameter se’cction procedure identified in Table 4.1, in 
accordance with Tables 2.1, 2.2, and 2.3 of Chapter 2. 
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Table 4.4 summarizes the heading maneuver procedures in a 
similar format. 

The first entry indicates that heading maneuvers will be 
initiated in response to ATC vector requests. The commanded 
heading is simply that requested by ATC» the turn rate is a 
standard 3 deg/sec, with the sign chosen to minimize the total 
heading change. 

The second entry corresponds to a flight manual final approach 
procedure. It is triggered by localizer activity and the intent is 
to ensure that the final approach heading coincides with the 

e 

inbound localizer heading; \j/ L0C . Tl, e rate command , is 
not fixed/ but assumed to be calculated so as to ensure that, at 
the end of the turn maneuver/ the vehicle ground track tangentially 
intercepts the localizer plane (i.e., ^ when e L0C ■ 0). 

Flare Maneuvers 

Table 4.5 summarizes the flare maneuver procedures in a 
similar format. 

The first entry is triggered by being 0.5 dot below the glide 
slope. The commanded flight path angle is chosen to equal the 
negative of the glide slope elevation angle; the rate command, 
Y final* is not fixed, but assumed to be calculated so as to ensure 


i 
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Table 4.4: Heading Maneuver 

Procedures 

TRIGGER 



RATE 

CONDITION 


COMMAND 

COMMAND 

1. ATC TURN REQUEST 

^cmd - ^ATC 

^cmd~" 3 deg/sec 

2 . LOC ACTIVE 


^LOC 

^final 

Table 4.5: Flare Maneuver Procedures 

TRIGGER 



RATE 

CONDITION 


COMMAND 

COMMAND 

1. e , c “-0. 5 dou 


Y oma = ” 0GS 

• • 

Y .^md _Y final 

2. h = 50 ft 


0 

• 

^f lare 


Table 4.6: Altitude Maneuver Procedure 


TRIGGER 


RATE 


COMMAND 

COMMAND 

COMMAND 


ATC CLIMB/DESCENT 

• 

• 


REQUEST 

i)Y. =— h /v 

cmd c c 

i)Y cmd = i °‘ 2 

deg/sec 


11)h crnd =h fo 

^cmd - ^c 



iiilY cmd =0 

iii)Y cm.d = i °’ 2 

deg/sec 


note 1 : 


it ATC requests DESCENT, 


: -30ft/s if h>5000 ft 

n c~ -15ft/s <5000 ft 


note 2; = f(h c ,v c ) 
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that, at the end of the flare, the vehicle is on the glide slope 
(i.e., y — e GS when e GS =0) . 

The second entry is triggered by a 50 ft AFE altitude and is 
intended to ensure a final flare which results in zero sink rate at 
zero altitude, via an appropriate choice of the free parameter 

Y flare* 

Altitude Maneuvers 

Table 4.6 summarizes the one climb/descent procedure required 
for the approach. 

In response to an ATC climb or descent request to a specified 
altitude h c , three maneuver sub-commands are generated. The first 
is a flare command, with \nnd chosen to achieve the desired 
climb/sink rate (h c ) , assuming the vehicle is maintaining its 
current velocity (v c ) . The nominal sink rate h c is procedurally 
specified as a function of current altitude, as shown in the table. 
The flare rate associated with this first sub-command is fixed at 
0.2 deg/sec, with the sign chosen appropriately. The second 
sub-command is an altitude command to a flare-out altitude, hj Q . 
This flare-out altitude is calcu jted to ensure that the 

commanded altitude, h c , is attained at the end of the flare-out. 
The third sub-command is the flare-out command, again incorporating 
a fixed *lare rate of 0.2 deg/sec. 
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4.2.2 "Regulatory" or "Closed-Loop" Control 


In order to maintain the nominal or desired approach the PF 
must compensate for disturbances. This is especially important in 
a non-coupled final approach. The regulatory or closed-loop 
control task is one for which the standard OCM is particularly 
appropriate. However, we must account for this task being one of 
several competing for the PF > s attention. 


Following the OCM, we assume that the PF's (perturbation) 
control actions in regulating about the nominal, are g*ven by 


/\ 

u(t) = L Ni (t)x(t) 


(4.1) 


where x(t) is PF's estimate of the perturbation state and L is the 
matrix of control gains chosen to minimize a quadratic cost 
function in error and control variables of the forms 

J =H + (H 2 ) 2 * p §§) 2 

\ max/ ymaxf ymaxf \ max/ \e / 


Cl X ) 4 ('max) + ( T max) + (*Lx) 


LOC 

2 


(4.2) 


Note that the control gains depend on the nominal segment 
being flown. They also can be time varying within a segment if 
the system matrices change (as in a turn) or if the weightings vary 
with time or range (as in the final approach) . 
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As noted earlier, the weightings £or the cost function (4.2) 
are chosen whenever the maneuver procedure is executed (recall step 
3 of Table 4.2) . The use of estimated maximum allowable deviations 
in defining the weightings is standard practice in applying the OCM 
[3] . The particular values selected for these maxima were based on 
the literature, an examination of the cockpit instrumentation and 
"educated guesses". The weightings are assumed to vary with 
approach progress and segment type as shown in Tables 4.7, 4.8 and 
4.9. Table 4.7 shows how the state/display-associated weightings 
are selected on the basis of approach progress, and Table 4.8 shows 
how selected weightings are modified on the basis of the maneuver 
being executed. Finally, Table 4.9 defines the control-associated 
weightings, as functions of maneuver-type. 

The other aspect of the closed-loop control procedure that 
must be specified is the manner in which the pilot shares attention 
among the displays of interest. We have assumed that this is done 
in accordance with the following sub-optimal algorithm. It can be 
shown that, in steady-state, the portion of J related to the 
operator's observation noise (and, therefore, to the attentions) 
is given by [7] 

J(V) = Tr {I^QyL^V)} (4.3) 
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Table 4.7s State/Display Weightings vs. Approach Progress 


Approach 
’rogress 


Weighting 


Before 

LOC 

Intercept 


After LOC Intercept 
& 

Before GS Intercept 


After 

GS 

Intercept 


3 

3 

3 

1.5 

00 

00 

1.0 

1.0 

1.0 

300 

300 

00 

00 

0.33 

0.33 


00 


00 


1.00 
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Table 4.6: State/Displav Weighting Modifications vs. Maneuver 

Maneuver Weighting Modification 


DECEL 

v » v _ /3 

max max' 

TURN 

= A /3 

y max *max 

FLARE 

y = y /3 


’ max ' max 

DSCNT 

^max " ^max^^ 

S&L 



Table 4.9: Control Weightings vc . Maneuver 
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where L is the control gain (4.1), l the estimation error 
covariance and is the control-weighting matrix in the cost 
functional. Thus, the estimation errors are weighted by their 
importance for the control objectives. Now, it is easily shown 
that the reduction in uncertainty obtained by "sampling" the 
i th display at time k is* 

Z k/k-l “ E k/k " Z k/k-l C i [C i Z k/k-l c i + ^y i I lc i Vk-1 (4,4) 

A 

where is the i th row of the display matrix (Eqn. 3 . 6) # s jc/k— 1 

is the uncertainty at time k if no observation is made,^/^ is 
the uncertainty with observation of display i, Vy^ is the 
observation noise associated with display i (Eqn. 3.7) and A is 
the interval between samples. 

Equation (4.4) may be thought of as the monitoring gain for 
observing display i. However, we are interested in the gain for 
observing display i with respect to control objectives, so we 
substitute (4.4) in (4.3) to obtain 

Ji - Tr<L T 2 u L < 4 - 5 > 

TT 

If we were to implement a pure scanning strategy, we would simply 

assume PF monitors the display for which is a maximum. Here, 

instead, we use a "mixed" scanning strategy and define fractional 

attentions by 

* We use the discrete Riccati equation for estimation (6]. We also 
assume no rate information obtained from the display but this is 
easily changed. 
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(4.6) 


Should any of the f^“s defined by (4.6) fall below .01, we set them 
to .01 and modify the remaining attentions in an appropriate 
manner. The monitoring algorithm just described actually is in 
operation during maneuver control and retrim as well, so long as 
another monitoring request has not been made. 


A question arises in the multi-task environment: "What is the 
control law when another task is being performed?". We shall 
assume that control is continuously applied according to (4.1). 
The effect of executing another procedure will not be one of 
interrupting control, but rather, one of diverting attention from 
the observation of those variables needed for control. This will 
necessitate using predicted values for x in (4.1), during the 
interval of interrupted observation, resulting in an "open-loop" 
perturbation control until the vehicle control procedure is 
invoked again. 
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4.2.3 Retrim Procedure 

This procedure is also assigned to the PF, and has as its 
basic objective the retrimming of the vehicle whenever flap or gear 
settings change the trim conditions. Since no maneuvers are 
involved , this procedure can be simply summarized as shown in Table 


Table 4.10: Retnm Procedure (PF) 


Step 

1 

2 


Action 

Solve for trim controls 
Set trim controls 


( v 


V *c> 


4.10. As in the maneuver procedure, the trim controls are obtained 
by use of an algorithm based on the solution outlined in section 
C.7 of Appendix C. 

4.2.4 Monitor Procedure 

This constitutes procedure category 1 for PNF, as shown in 
Table 4.1. The background or default monitoring is to determine 
vehicle status and to detect failures or events. Monitoring for 
approach progress has been associated with callout procedures. 
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Monitoring for status determination could involve attention 
sharing to minimize uncertainty in a manner similar to that of the 
closed-loop control procedure (but without the control gain 
weights) . Monitoring for failure or event detection and 
identification might be predicated on the relatively sophisticated 
algorithms discussed in [1,6,9]. In this initial investigation 
with PROCRU, we assumed that PNF shares attention among flight 
instruments so as to minimize uncertainty (i.e., Tr z ) when 
exercising the monitoring procedure. 

4.2.5 PF Request Procedures 

The verbal requests made by the PF include calling for 
appropriate flap settings, lowering of the gear, and initiating 
checklists . 

The flap request procedure is summarized in Table 4.11. Note 
tnat all the triggering conditions involve the vehicle velocity 
reaching some "setpoint" velocity (from above) , and all of the 
procedural actions involve a verbal request to the PNF. The two 
unspecified parameters are assumed to have been previously 
specified by the landing parameter selection procedure identified 
in Table 4.1, in accordance with Tables 2.2 and 2.3 of Chapter 2. 

The gear request procedure is defined by Table 4.12. When the 
vehicle is 2 dots below the glide slope, a lower gear request to 
the PNF is called for . 
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Table 4.11: Flap Request Procedure (PF) 


TRIGGER 

CONDITION At'c T ON* 


v=190 

kt 

"set flaps to 2 deg" 

160 

kt 

5 

150 

kt 

15 

140 

kt 

25 

V app 

6 lf 


♦verbal request from PF to PNF 


Table 4.12: Gear Request Procedure (PF) 


TRIGGER 

CONDITION 


ACTION* 


e GS =-2 dot | "lower gear" 
♦verbal request from PF to PNF 
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The procedure for requesting initiation of the initial 
approach checklist (IAC) and the final approach checklist (PAC) is 
given in Table 4.13. Both triggering conditions involve the 
vehicle altitude reaching some "setpoint" altitude (from above ) , 
and both procedural actions involve a verbal request to the 80. 

4.2.6 PNF Callout Procedure 

The verbal callouts made by the PNF include calling out 
vehicle approach progress and approach stability. 

The vehicle approach progress callout procedure is summarized 
in Table 4.14. The first four items have trigger conditions 

associated with the ILS beacon system , and result in a verbal 
indication to the PF of vehicle position relative to the ILS 
geometry. The last four items are altitude callouts, and are 
predicated on vehicle height AFE and the selected decision height 
(h DH ) * the latter assumed to have been previously specified by the 
landing parameter selection procedure. As noted in Chapter 2, the 
decision height for this study was fixed at 2C0 ft. The altitude 
callouts are used by PF as discrete measurements to update PF's 
estimate of altitude. 

The approach stability callouts made by the PNF have already 
been detailed in Table 2.7 of Chapter 2. 
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Table 4.13s Checklist Initiation Request Procedure (PP) 


TRIGGER 


CONDITION 

ACTION* 

h = 3500 ft 

"Start I AC" 

2000 ft 

"start FAC' 


♦verbal request from PF to SO 


Table 4.14: Approach Progress Callout Procedure (PNF) 


TRIGGER 

CONDITION 

ACTION* 

1. 

LOC ACTIVE 

"localizer capture" 

2. 

GS ACTIVE 

"glide slope alive" 

3. 

OM ACTIVE 

"outer marker" 

4. 

MM ACTIVE 

"middle marker" 

5. 

h » 1000 ft 

"1000 ft" 

6. 

h - 500 ft 

" 500 ft" 

7. 

h - h DH +100 ft 

"approaching minimums" 

8. 

h " h DH 

"minimums" 


verbal callout from PNF to PF 
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4.2,7 Subsystem Monitoring and Control Procedures 

As noted earlier, the subsystem monitoring and control 
procedures for the PF can be conveniently separated into those 
dealing with the altitude alert (AA) subsystem, and those dealing 
with other subsystems. 

The altitude alert servicing procedure is summarized in Table 
4.15. The first entry indicates that ATC descent requests will 
trigger AA servicing. The servicing involves paying almost full 
attention to the AA while setting the alert altitude, h^, on the 
basis of the requested descent altitude and a scale factor K, 
which, for our study was set to 1.15. This provided for AA alarm 
turn-on at an altitude 15% higher than the requested descent 
altitude. 

The second entry indicates that similar AA servicing will be 
triggered by passage of the OM. Here the alert altitude h^ is 
specified to be set to the decision height h DH . 

The final entry provides for AA alarm servicing. Again, this 
implies a diversion of attention from flight displays while the 
alarm is turned off. 

Other miscellaneous subsystem servicing procedures assigned to 
the PF (and PNF) are summarized in Table 4.16. The trigger 
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Table 4.15: Altitude Alert Subsystem Servicing Procedure (PF) 


TRIGGER 

CONDITION 


ACTION 


1. 

ATC DSCNT REQUEST 
(h cmd " h ATC* 

set 

h AA " Kh ATC 

2. 

OM ACTIVE 

set 

h AA * h DH 

3. 

AA ALARM "on" 

set 

AA ALARM "off" 


Table 4.16: Subsystem Servicing Procedure (PF/PNF) 

TRIGGER 
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conditions and actions are self-explanatory. Mote that all of the 
actions require a diversion of attention, away from the primary 
flight control displays and towards the appropriate subsystem being 
serviced . 

The final category of subsystem servicing procedures are those 
concerning flap and gear settings performed by the PNF, which are 


Table 4.17: Flap/Gear Subsystem Servicing Procedure (PNF) 


TRIGGER * 
CONDITION 


ACTION 


1. "set flaps to 


2 . " lower gear" 


deg" 


i) check speed/flap table 
ii) set flap handles 

iii) confirm flap setting 

i) set gear handle 
ii) confirm aear down 
iii) confirm doors open 


♦verbal request from PF to PNF 


summarized in Table 4.17. The first item shows the verbal flap 
request made by the PF triggering three actions: a validation 
concerning the appropriateness of the request; a setting of the 
flap handles; and a confirmation of the flap handle setting with 
the associated indicator lights. All three actions divert 
attention from the flight displays. In addition, the actual 
setting of the flaps affects the vehicle dynamics (as described in 
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t 

i 

i 


\ 

{ 

|; 

i: 

r; 



Appendix C) so that a requirement is placed on the PF to retrim the 
vehicle (via the retrim procedure discussed earlier) . 


The second item shows a similar verbal request trigger which 
results in three actions: a setting of the gear handle, and two 
subsystem confirmations. Again, these are all modelled as 
attention "sinks", and the actual gear lowering drives the vehicle 
dynamics, similarly requiring a retrimming by the PF. 


4.2.8 Acknowledgement Procedure 

The verbal acknowledgements made by the PF and PNF involve 
responses to checklist item prompts made by the SO. In addition, 
the PNF is required to respond to and acknowledge ATC vectoring 
requests. 

The acknowledgement procedure is summarized in Table 4.18. 
The first item is conditioned by a checklist item prompt by the SO. 
The intended recipient of that prompt is then required to monitor 
the appropriate subsystem associated with the checklist item (an 
attention sink), and verbally respond with a confirmation of 
subsystem validity.* Currently, nine checklist item prompts are 
targeted for the PNF, and one for the PF. The second item is 
similarly structured, involving a confirmation by the PNF of the 


* In this study, we assume no subsystem failures. 
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Table 4.18: Acknowledgement Procedure 

TRIGGER ACTION 




CONDITION 


BY 


ACTION 

1 . 

SO: 

"subsystem ___ 

_ OK?" 

JPP \ 

i) 

monitor subsystem 





1 PNPj 

ii) 

"subsYst^"! OK" 

2. 

ATC 

REQUEST 


PNP 


"confirm. - . '* 


ATC vector request. No subsystem monitoring is required here, 
however . 


4.2.9 SAP /MAP Terminal Procedures 

The SAP/MAP terminal procedures include appropriate callouts, 
decisions on display monitoring strategy, and control actions. 
Although operationally considered different procedures, both the 
SAP and MAP can be conveniently summarized as shown in Table 4.19. 

The first item indicates that, for either procedure, the PNP 
begins monitoring the external scene at a "search height" hg H . In 
accordance with operational manual dictates, we assume that the PNF 
divides his attention equally between the external scene and the 
instruments, in order to maintain back-up monitoring capability 
while searching for visual landing cues. 
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Table 4.19: SAP/MAP Terminal Procedures 


TRIGGER 

CONDITION 


ACTION 

BY 


ACTION 
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If the PNP observes the runway while monitoring the external 
scene , the SAP dictates a "runway in sight" callout, while the MAP 
dictates a "taking control" callout, as shown by item 2.* Items 3 
and 4 show the appropriate follow-on action for each of these 
callouts. 

If no callout has been made by the time the vehicle reaches 
the decision height, h DH , then item 5 provides for the PF to 
announce and execute a missed approach while the PNF switches to 
instruments and assists in the missed approach. The missed 
approach procedure itself has already been outlined in Table 2.12 
of Chapter 2. 

It should be noted that the SAP/MAP procedures outlined above 
are considerably simplified from those outlined and discussed in 
Chapter 2. This has been done for the purpose of modelling 
simplicity, but an attempt has been made to retain the essential 
monitor and control aspects which differentiate the two basic 
approach procedures. 

Table 4.19 requires the specification of two height 
parameters, and a definition of RWIS. The "search height" hg H was 
specified to be 300 ft; the decision height, h DH was set at 200 ft. 

* For simplicity, we assume the vehicle to be appropriately 
positioned for a VFR landing when the runway is in sight. 
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The RWIS condition was determined simply by specifying a "breakout" 
altitude of 250 ft. 

4.3 Expected Gain Functions for Procedures 

As discussed in Chapter 3, each of the procedures just 
described has associated with it an expected gain EGP(I) for 
determining the "value" of executing that procedure at any given 
time during the approach. This section defines the EGP's 
associated with each of the procedures and provides a rationale for 
these definitions. 

4.3.1 General Form of EGP Function 

In Chapter 3, we defined the EGP(I) function as 

EGP ( I ) - G(I) + G 0 (I) (4.7) 

where G(I) is a function related to the relevance of executing the 
Ith procedure and G 0 (I) is a constant chosen to reflect the 
baseline value of the procedure, independent of its situational 
relevance. It is useful to write G as the product of two 
functions, i.e.* 


* For convenience, here and subsequently, we do not show the 
dependence on procedure number explicitly. 
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G - 0 * R (4.8) f 

where R is a function of the relevance of the procedure and U is, 
for this initial implementation of PROCRU, a unit step function 

that is one when the procedure is "enabled" by an appropriate event 

\ } 

f and is zerc otherwise.* 

i 1 

a For all of the procedures considered in this study, one of 

r ' 

h three generic functional forms is used to specify the R component j 

[!. of the EGP. We discuss these functions in the following 

IV 

t. 

paragraphs . 

One of the generic functions which we call a "timeliness" 
function, T, is applicable to procedures which are "event 

drive..". If we assume a procedure should be executed immediately 
after, or within a short time following, the occurrence of the 
event e, then the corresponding relevance function should be 
predicated on the time of event occurrence, t e . Equation 4.9 

shows such a functional dependence. 

0 if t<t 

e 

. T * l-e^ t-t e^ T if t g < t< t g + . 69 t (4.9) i 

1 1 if t> t_ + . 69 t 

i : 

* fn future work, U could be a more sophisticated "utility" j 

function. 
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f 

L 

l Prior to the "event time" t e » T is zero; after that time, it grows 

j 

exponentially, with a time-constant t appropriate for that 
procedure, to a limiting value of unity. 

The type of procedures utilizing this general function are 
those which are "triggered" by discrete events! the PNF's verbal 
acknowledgement of a verbal ATC vector request; the PF's turning 
off of the altitude alert alarm, the PNF's callout of localizer 
activity, etc. 

The other two generic R functions, called "appropriateness” 
functions, A, are intended for use with procedures which are 
triggered by the satisfaction of one or more vehicle state/display 
conditions (e.g., the gear lowering request made by the PF when the 
vehicle is 2 dots below the glide slope) . For a crewman to 
determine when such a procedure is "appropriate", calculation of 
the subjective probability that the procedure's triggering 
condition is satisfied is required. Since a high probability 
indicates that procedure execution is highly appropriate, and 
conversely with a low probability, the probability calculation 
provides a direct measure of "appropriateness” on a zero to one 
scale. 

If a procedure is to be triggered when a particular state 
variable that is changing monotonically reaches a predetermined 
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value, we may define an "appropriateness” function by the 
expressions 


and 


(4.10) 


A i - * {*J " *j w + *4^ < 0 
* pt { X 1 » x j s , ' x 3t} '*J " 0 

where Xj is the appropriate state variable for the procedure, x 
is the trigger cr set-point value and x 


3t 


jfip 

is a tolerance level 


added to provide some "anticipation" . The subjective probability 
calculation implied by (4.10) is based on the crew member's 
estimate of the state and the uncertainty in that estimate. The 
probability function (A^) will continue to increase monotonically 
as the set-point is approached and passed; it will have a value of 
.5 when the estimate of the state equals the set-point plus the 
tolerance. Thus, this functional form implies that the procedure 
never becomes inappropriate once the trigger conditions have been 
met; i.e., the procedure should still be executed even if late.* 


Examples of procedures utilizing this appropriateness function 
are the altitude callouts by the PNP, the velocity-triggered flap 
requests made by the PP, and the glide-slope dependent speed-brake 


* However, T? the procedure is executed, or IT For some other 
reason it becomes inappropriate to execute, the U function can be 
set to zero. 
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subsystem servicing performed by the PP. The various set-points 
are the trigger values given in the tables describing the 
procedures. 

A second, slightly modified, form for the appropriateness 
function is used when the procedure is driven by a "window" 
requirement on the state? i.e., if a procedure is triggered when 
the state enters or "escapes", or is about to enter or escape, some 
window of acceptability. For such a procedure, we use a two-sided 
probability calculation for the "appropriateness" function? 

*2 ' 1 ' Pr i x V x i» 1 x i 1 x * sp T M - u ’ 

The A 2 function is used for the EG? calculation associated 
with the regulatory procedure (with Xj ■• 5x j max » where x j max is the 
value used in computing the corresponding cost functional 
weighting) and for the procedure for approach destabilization 
callouts. 

Tables 4.20a and 4.20b summarize the parameters associated 
with the procedures defined for PF and PNF. Shown are the enabling 
events and the function type and parameter values for the EGP 
functions. Also shown are the nominal lock-up times associated 
with execution of each procedure (see below) . 

4.4 Procedure Execution 

In terms of execution, it is useful to separate the procedures 
into two classes, those that require a condition or predicate to be 
satisfied before an action is taken, and those that don't. 
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Table 4.20ai Procedural Par ante tore, PF 


ENABLING EVENT 


any audio ac 

detecta h < h i#c 
detects h < h f#e 
doing a maneuver 

ATC nag decoded 
detecta v : v FIAp 

8/0 prompt decoded 

KWXS callout decode* 

Chg Alt. command 
detoxed 

not implemented 

not implemented 

not implemented 

not implemented 

not implemented 
not implemented 

2 dots belov 88 
1/2 dot below 88 

Flare to TD-trim J detects h <50 

Turn onto LOC- 

tr.^-t 

Decel to 150- 
trim 


detect tOC "on" 


Cleared for landing 
1.5 dote below 88 
1.0 dots below 68 
detect h < 150* 

AA alarm decoded 

Missed approach 
eallout decoded 

always enabled . 3 

Alt. callout decode! 


_ p* or "relevance function 
••For T functions, the parameter is the time constant (in seconds) of Eqn. 4.9. 

For Aj functions, the parameter is the toleranes level added to the set point 

(j^ of Eqn. 4.10). For A 2 functions the parameter is tie window value lx w of 
Pen. 4.11). 

Not currently implemented. 
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Table 4. 20bi Procedural Paramatara, PNP 


PRIORITY I GAIN 


puNcnos 

PARAMETSft* 


I alarm i 
Other i 5.0 



2. U3C callout 

LOC alarm decoded 

1. OS callout 

d> alarm deeoded 

4. ON callout 

ON alarm deeoded 

S. NN callout 

MM alarm deeoded 

4. Runway in eight 
aquation 

detects h »h #|| 

7. 

• 

•* Respond to flaps 
request 

flap requese decoded 

P. Respond to gear 
request 

gear request deeoded 

10. Acknowledge ATC 
Respond to B/O 
Prompts. . . 

ATC aag decoded 

11. 'Cone, ignition 
on?* 

S/O prompt deeoded 

12. ‘Seat bale on?* 

• 

13. ‘A.f.iN instru- 
ment check" 

• 

14. "RA/loro, Alt. 
bug eheck* 

41 

IS. ‘AlrSEPR bug 
cheek* 

• 

16. "Mo • mo kin? ai?n 
on" 

m 

17. 

a» 

11. "Approach flaps 
set?* 

«B 

IP. 'Tail skid light 
off?* 

4S 

20. "Spaad brakes 
armed?* 

II 

21. Approach eeabilit 
monitor 

y 

ON alarm deco dad 

22. Status uonitor 


23. 1000' Alt. 
callout 

detects h» h^ 000 »2S 

24. 300* Alt. 
callout 

da t sets h * h J00 *2S 

2S. Approaching 
minimum eailout 

detects h 1 h flif) -25 

1 2 *. Minimum callout 

detects h t h_,, *2$ 


i 


x aax/2 

IS 


•Type of ‘relevance* function 

••for T functions, the parameter 1 a tha tusa eonstantiin J**®^ 8 *^* 4 i!;_ t 
for A, functions. the piramatar la tha tolaranca laval added to tha sat point 

( - ot tqn. 4.10a). for Aj funetiona tha paraaatar is tha window valua ;k w of 
Eqn. 4.11). 
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If no predicate is specified, an appropriate control, 
monitoring or communication action will immediately follow the 
selection of a procedure. The only exception to this is the 
message decode procedure which can have as its output the 
"enabling" of a subsequent ' procedure. Examples of procedures 
without predicates are the default procedures of regulatory control 
and monitoring and some event-driven procedures, such as check list 
execution. 

If a procedure has a predicate for execution, then the first 
step of the procedure involves a check to determine the situation 
with respect to this predicate. In the case where the predicate is 
a discrete event, the event detector is checked to see whether or 
not the requisite event has occurred. If so, action is taken? if 
not, the procedure is exited. Usually, however, the predicate 
condition is one on a vehicle state variable. In this cas<*, what 
ensues upon the selection of such a procedure is determined by the 
level of the procedural appropriateness function. A, as follows: 


A < P MON 

exit procedure 

(4.12a) 

P MON K A K P ACT 

monitor request 

(4.12b) 

A > P ACT 

control action 

(4.12c) 
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Equation 4.12a is included to account for the possibility that a 
procedure may have the highest gain and yet still not be 
sufficiently close to the triggering condition , in the operator's 
estimation , to warrant action. This could happen during a 
"relaxed" portion of the approach. When the probability of 
satisfying the condition (as determined by A) exceeds a monitoring 
threshold (P^on) # but is less than an action threshold (?&ct) » a 
monitoring request is issued. This results in full attention being 
devoted to the "display" to be monitored,* so as to reduce the 
uncertainty in the corresponding estimate and thereby increase the 
likelihood that an action/no action decision will be made 
subsequently. If Eqn. (4.12c) is satisfied, the appropriate 
discrete action (set flaps, extend gear or make callout) is then 
taken. We note that either type of appropriateness function, A^ or 
A 2 , may be used in establishing the predicate, depending on the 
procedure. 

The other important aspect of procedure execution is that each 
action is assumed to take some specified time, during which no 
other activity takes place. The "lock-up times" used in this 
initial implementation of PROCRU are, essentially, "reasonable 
guesses". The specific values are given in Table 1.20. 
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5. SIMULATION RESULTS 

In this chapter , we present results to illustrate the 
operation and capabilities of the PROCRU model. Sensitivity of 
model results to selected variations in system and operator 
parameters is examined briefly. 

5.1 Simulation Conditions 

5.1.1 System Variables 

We will consider two approach scenarios starting from the same 
initial conditions (Figure 2.2, 2.3). One scenario, ATCLO, a low 
workload approach, is essentially the nominal approach described in 
Chapter 2; the other, ATCHI, is a higher workload scenario in which 
the tempo is increased by having the final segment shortened by an 
early turn towards the localizer.* The ATC commands for the two 
scenarios are given in Table 5.1. 

For this analysis, we have not attempted to model wind 
disturbances in any realistic fashion. Instead, we have simply 
added zero-mean white gaussian noise sequences in parallel with 
each of the control inputs. Two values for the covariances of the 
noise sequences were used in the analysis: 

* But late with respect to time to touchdown. 
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.* -v..... ■ - v- 


TIME 

.# + 

(seconds) V 

r 

NOMINAL 1 

HIGH WORKLOAD 


Table 5. It ATC Commands for Approach Scenarios 


COMMAND ' 


TURN to 270 
DECEL to 170 kts 

r 

DESCEND to 3500' 
DECEL tO 160 kts 
TURN to 180° 
DESCEND to 2000' 

mrimi i- i o.O 


TURN to 120 
CLEARED for landing 





Ipj5f V « “'Tf«*'W 
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LOW i W^ -<1 deg ) 2 t W a -(.1 deg ) 2 * W T * (200 lbs) 2 
HIGH* *(6 deg) 2 * W a - (.6 deg) 2 * W T - (1200 lbs) 2 


where the subscript on the covariance indicates the (control) 
input injection point of the noise.* These two sets of values arc 
considered so as to span a range of approach difficulty. 


5.1.2 Crew Variables 


With respect to crew variables, we will consider variations in 
observation noise (a workload related parameter [5]), in procedure 
"lock-up" times, and in the base priority level (G Q ) for performing 
the default procedures of flying (for PP) and monitoring (for PNP) . 

The base value for PY in Eqn. (3.7) is set at -20 dB, a value 
obtained in laboratory tracking experiments in which subjects were 
devoting full attention (or a large amount of attention) to the 
task [2]. Nominal thresholds for instruments were set at zero, but 
the constant components of observation noise, which have a similar 
effect, were non-zero (see Eqn. (3.7)). In particular, the 
constant values were set at: 


e noise levels correspond to control input levels in 
noise disturbance is multiplied by the control injection matrix B 
(see Eqn. (3.5) ) . 
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v° h » (25 ft) 2 

V£ » (.5 ft/sec) 2 

V° v • (.5 kt) 2 

V° loc - (.2 dot) 2 

V°^ - (.5 deg) 2 



Thresholds for the external scene were set to the values In 
Appendix D> constant noises for the external scene were set to 
zero. 

The above observation noise parameters were assumed to 
correspond to full attention. The observation noise was also 
doubled to correspond to a case in which less (one-half) attention 
is devoted to the modelled task (perhaps because of inner loop 
control requirements or less motivation) • 

Base lock-up times and other parameters for the various 
procedures are those shown in Table 4.20. Base values for and 
*ACT in E< J n » (4.6) were chosen to be .8 and .95, respectively. To 
explore the effects of some of these parameters, variations in 
lock-up times and in the base gain value of the default procedures 
were considered. A simulation was run in which all lock-up times 
were increased by approximately 50%. In another case, default gain 
values were increased from .3 to .6. 
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I 

I 5.1.3 Procedural Variables 

I The only procedural variation examined here is between basic 

I SAP and MAP procedures as defined in 8eotion 4.2.9. 


5.2 PROCRP Outputs 


s 

| 

i- 

[■ 

i- 

5 

; 

i 

!■ 

! 


r 


f 


PROCRU generates a number of outputs that are useful for 
analysing crew procedures and performance. First, one can obtain 
full trajectory information. This information is provided at any 
time in terms of the total state (TSTATE xt) (and/or the nominal 
state) and the perturbation or deviation (DSTATB x) from the 
nominal. In addition to this information , one can obtain each crew 
member's estimate of the state (xh) and the standard deviation of 
the estimation error (SDEV ) , the attentional allocation (AT) at 
that time and PF's control inputs (u) . These data, along with 
significant events, etc., are tabulated in an AMS (answer) file as 
illustrated in Figure 5.1. The ordering of state and control 
information, from left to right, is (x,y,h,v, ) and ($ , a,T, 
Flaps, Gear). PF is crew member 1 and PNF crew member 2. 




In addition to the AMS output, PROCRU provides three separate 
time lines* a procedural time line (PTL) , a message time line 
(MTL) , and a milestone time line (TL) . Table 5.2 lists the 
mnemonics used for these time lines. The procedural time-line, 
illustrated in Figure 5.2 for the nominal approach conditions, 
provides a listing of the procedures (PROC) being executed by each 



1 

| 


X 

| 
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Figure 5.1* Sample PROCRU Trajectory Information File (Case 1LS) 


*** TIME* 5.816E+02 *** 

Tstate Xt* 1 . 489E+04-8 . 619E+04 2.091E+03 1.599E+02 1.799E+02-2.942E+00 
Dstate x* 1.278E-01 3.205E-01 1.832E-01-8.564E-02-7.831E-02 3.503E-02 
xhl k|k* 1. 263E+00 1. 221E+00-2.772E-01 1.923E-02 5. 370E-02-2. 596E-02 
xh2 k I k« 9 . 636E-01- 3 . 556E+00-4 . 201E-01 5 .574E-02-7. 441E-03 3.323E-02 

SDevl k k* 1. 251E+02 1.092E+02 7.846E+00 1.971E-01 3.031E-01 8.459E-02 

SDev2 k|k: 1.227E+02 1.081B+02 5.643E+00 2.192E-01 2.753E-01 1.084E-01 

ATI: V* .015 PSI: .240 Hi .010 Hdot* .713 LOC* .010 GS* .010 

AT2* Vt .066 PSI: .629 H: .112 Hdot* .153 LOC* .010 GS* .010 

***** Altitude Alert Active ***** 

GUIDE* * Executing FLARE to 0.000E+00 deg at 2.001E-01 deg/s " 

Total u* -8.950E-02 2.574E+00 9.398E+03 Flaps* 5. Gear is UP 


*** TIME* 5.818E+02 *** 

Tstate xt* 1.483E+04-8.619B+04 2.088E+03 1.599E+02 1.799E+02-2.864E+00 
Dstat® x* 1.605E-01 3.879E-01 2.360E-01-1.082E-01-6.467E-02 7.293E-02 
xhl klk: 1. 260E+00 1.172E+00-2.823E-01-4.249E-04 5.151E-02 1.534E-02 

xh2 k | k t 1.432E+00-5.007E+00-1.348E-01 1.177E-02 4.980E-02 6.501E-02 

SDevl kik: 1.251E+02 1.092E+02 7.847E+00 1.972E-01 3.080E-01 8.745E-02 

SDev2 k I k: 1.227E+02 1.081E+02 5.644E+00 2.192E-01 2.753E-01 1.085E-01 

ATI: V: 0.000 PSI:0.000 H: 0.000 Hdot:0.000 LOCiO.OOO GS: 0.000 

AT2: V: .086 PSI: .628 H: .112 Hdot: .154 LOC: .010 GS: .010 

***** Altitude Alert Inactive ***** 

GUIDE: ■ Executing FLARE to 0.000E+00 deg at 2.001E-01 deg/s ■ 

Total u: -8.586E-02 1.955E+00 9.502E+03 Flaps- 5. Gear is UP 

*** TIME* 5. 820E+02 *** 

Tstate xt* 1.478E+04-8.619E+04 2.086E+03 1.599E+02 1.799E+02-2.852E+00 
Dstate x* 1.955E-01 4.469B-01 2.933E-01-9.887E-02-6.040E-02 4.449E-02 
xhl klk: 1. 258E+00 1.124E+0G-2.789E-01 1.015E-02 4. 942E-02-7.861E-03 

xh2 k I k : 1.234E+00-4.404E+00-2.945E-02 1.631E-02 2.031E-02 5.046E-02 

SDevl k k: 1.252E+02 1.092E+02 7.848E+00 1.972E-01 3.128E-01 9.021E-02 

SDev2 k I k * 1. 227E+02 1.081E+02 5.644E+00 2.192E-01 2.753E-01 1.08SE-01 

ATI: V: 0.000 PSI:0.000 H: 0.000 Hdot:0.000 LOCiO.OOO GS: 0.000 

AT2: V: .086 PSI: .628 H: .112 Hdot: .153 LOC: .010 GS: .010 

GUIDE: " Executing FLARE to O.OOOE+OO deg at 2.001E-01 deg/s " 

Total u: -8.236E-02 2.301E+00 9.606E+03 Flaps* 5. Gear is UP 
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Table 5.2 » Mnemonics for Time Lines 


FlapR 

GearR 

OCR 

IACR 

FACR 

OMA 

LOCA 

GsipA 

Alt Co 

AppDs 

RwisC 

ATCcn 

DC#1 

IACll 

I AC #2 

I AC# 3 

IAC#4 

IAC#5 

FAC#1 

FAC#2 

FAC# 3 

FAC #6 

SBck 

SBSon 

Flaps 

Gear D 

ILLon 


Flap request 
Gear request 

Beqin descent checklist request 

Beqin initial approach checklist request 

Begin final approach checklist request 

Outer marker active callout 

Localizer capture callout 

Glide slope alive callout 

Altitude callout 

Approach destabilization callout 

Runway in sight callout 

Confirmation of ATC msg. 

Descent checklist item #1 
Initial approach checklist item #1 
Initial approach checklist item #2 
Initial approach checklist item #3 
Initial approach checklist item #4 
Initial approach checklist item #5 
Final approach checklist item #1 
Final approach checklist item #2 
Final approach checklist item #3 
Final approach checklist item #6 
Speed brakes armed - check. 

Seat belt sign on announcement 
Flaps set announcement 
Landing gear down announcement 
Inboard landing lights on announcement 




r mvr* 
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SBarm 

MSSon 

ASon 

GPWon 

AAon 

AAoff 

LOCon 

GSon 

OMon 

MMon 

GPWSa 

AltAl 

Decel 

Turn 

Flare 

ChAlt 

DCst 

IACst 

FACst 

DCfn 

IACfn 

FACfn 

ClrFl 

CIgON 

MMa 


Table 5. 2 i (Cont.) 

Speed brakes armed . 

No smoking sign on 
Anti skid on 

Ground proximity warning system armed 

Altitude alert on armed 

Altitude alert disarmed 

Localizer on 

Glide slope on 

Outer marker on 

Middle marker on 

Ground proximity warning system alert on 

Altitude alert on 

Decel command 

Turn command 

Flare command 

Change Altitude command 

Starting descent checklist announcement 

Starting initial approach checklist announcement 

Starting final approach checklist announcement 

Finished descent' checklist announcement j 

Finished initial approach checklist announcement \ 

Finished final approach checklist announcement 

Cleared for landing announcement 

Continuous ignition on announcement I 

Middle marker active callout 
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Figure 5.2: Sample PROCRU Procedure Time Line (case 1Z-S) 


CAPTAIN (PF) 

TIME PROC : EGP CLUST OISP PROC: EGP 
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2.2 

5 i 

.32 

Instr 

Scan 

26: 

.30 
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3.6 

5: 

.32 

Inotr 

Scan 

26: 

.30 
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» 

I- 

crew member, the gain for doing that procedure (BOB) and the 
information cluster and display being attended to at a given time. 
Also provided for each crew member is the procedure that has the 
next highest gain for execution at that time. Procedure numbers 

■i ■» 

used in the PTL correspond to those in Table 4.20. Thus*, for 
example, at time 915.4 seconds, PF was flying on instruments 
(scanning) and no other procedures were competing for attention. 
At the same time, PNF was monitoring the altimeter in order to make 
an altitude callout (at t*919.6) , while the default monitoring task 
was the task with the next highest priority. Shortly thereafter 
(920.8 sec), PF diverts attention from regulating about the nominal 
to process the callout and PNF has reverted to basic monitoring. 

The message time line (MTL) is a record of all the 
communication traffic and auditory signals that occur in the 
simulated cockpit. Figure 5.3 is a message time line for the 
nominal approach. The type of message (Signal name), the source of 
the message and its destination, its processing status, its time of 
origin and processing, as well as an indication of the signal 
content are all presented using mnemonics that are fairly 
transparent. For example, on the message time line, we see the 
communication activity noted above. The 500 # altitude callout is 
made by the F/O (PNF) at 919.6 seconds and directed to the CAPT 
(PF) . It is processed (i.e. used to update PF's altitude estimate) 
at 921.0 seconds. 
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Figure 5.3: Sample PROCRU Message Time-Line (case 1LS) 
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Figure 5.3 tcont.) 
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The milestone time line (TL) is an approximation to the time 
line used in Chapter 2. It contains selected trajectory variables 
of interest (altitude , speed and heading) , an indication of crew 
activity and a listing of important flight milestones and events. 
The milestone time line for the nominal approach is given in 
Figure 5.4i and this can be directly compared with the time line 
in Chapter 2. Note that the time marker given in the T L# tg 0 , is 
the time-to-go# computed simply as 980s minus the event time. This 
provides a fair approximation to the actual time-to-go. 

5.3 Simulation Results 

Table 5.3 is a list of the cases simulated here with PROCRU. 
The designations L and H refer to the ATC scenario (low and high 
workload) while the S and M refer to SAP and MAP. Case 1LS is the 
nominal approach # i.e.# nominal in terms of both scenario and 
PROCRU model parameters. The other cases correspond to variations 
in approach conditions and model parameters. 

In discussing the results from these cases we must note that a 
single sample of the random disturbances has been used throughout# 
to facilitate comparison without resorting to Monte Carlo 
simulation. Thus# one should not draw any definitive conclusions 
with respect to performance or procedures from these results. 
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Table 5.3t PROCRU Simulated Cases 


Case No. 
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5.3.1 Nominal Approach (SAP) 

The milestone time line in Figure 3.4 presents an overview of 
crew activity for the nominal case and will be discussed in detail. 

The time-line begins with the vehicle at 10,000 ft altitude, 
on a 210 deg heading, proceeding at 190 kts. In the first 50 
seconds, three ATC requests, for a heading change, deceleration, 
and descent, are processed by both the PF and PNF. As shown in 
both Figure 5.4 and Figure 5.3, each request involves! a) a 
message generated by ATC (occurring at the time specified by Table 
5.1), sent to both the PF and PNF; b) message processing by the PF, 
resulting in a new maneuver (e.g., "Prcsd Turn"); and c) message 
processing by the PNF, resulting in a verbal confirmation of the 
ATC request (e.g., "ATCcn") . Note that Figure 5.3 shows that each 
confirmation message (from PNF to ATC) is ignored by ATC, since the 
ATC module used in this simulation operates in a time-locked 
open-loop fashion. Naturally, a more sophisticated module would 
take into account the procedural activity of ATC, and incorporate 
the verbal confirmatory feedback provided by the crew. 

The descent request made by ATC at t^ Q ■ 930s triggers a 
number of crew activities. As just noted, it triggers a verbal 
confirmation by the PNF. It also triggers the generation of a 
three-segment maneuver (flare/descent/flare) by the PF, in 


i 
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Figure 5.4 t Sample PR0CRU Milestone Time-Line (Case 1LS) 
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Figure S.4 (cont.) 
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Figure 5.4 (cont.) 
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Figure 5.4 (cont.) 
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Figure S.4 (cont.) 


343. 2 

1980 

149 

120 

342.4 

J.979 

149 

120 

326.4 

1975 

ISO 

111 

326.2 

1975 

150 

111 

325.2 

1975 

150 

110 

324.8 

1975 

150 

110 

286.6 

1978 

150 

89 

275.2 

1977 

150 

90 


272.6 

1977 

150 

90 

272.4 

1977 

150 

90 

269.8 

1978 

150 

90 

268.0 

1979 

150 

90 

267.8 

1979 

150 

90 

253.6 

1980 

149 

90 

243.4 

1979 

139 

90 

241.8 

1978 

139 

90 


239. 

.2 

1976 

140 

90 

233. 

.6 

1976 

140 

90 

232. 

.4 

1976 

138 

90 

231. 

.6 

1976 

138 

90 

229. 

.0 

1976 

138 

90 

228. 

,8 

1976 

138 

90 


Loc A 


End S & L Begin TURN 
to 90.0 deg 

G8: on -2.9 dote 


PrcsdGSon 


PrcsdGSon 


GalpA 


GearR 


End TURN Begin 8 & L 


Landing gear down 

GearD 

PrcsdGearR 


FAC* 2 


PreedFAC*2 
FAC* 2 


PrcsdFAC*2 

End S & L Begin DECEL 
to 140.0 kts 

End DECEL Begin 9 « L 

FlapR 

Flaps at 25.0 

Flaps 

PrcsdFlapR 

End 8 & L Beg i DECEL 
to 139.0 kts 

End DECEL Begin S & L 

FlapR 

Flaps at 30.0 

Flaps 

PrcsdFlapR 

FAC* 3 


126 


Report No. 4374 


Bolt Baranak and Newman Znc, 



Figure S.4 (cont.) 
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Figure 5.4 (cont.) 
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accordance with the procedure outlined in Table 4.6. Thus, a flare 
to -6 deg flight path is initiated at t go - 926s, and constant sink 
rate is maintained until t go - 707s, at which point a flare-out is 
initiated, and completed at t go « 676s. The ATC descent request 
also triggers an altitude alert setting by the PF ("AAon" at fc go " 
922s), in acc?' dance with the procedure outlined in Table 4.15. 

As the vehicle approaches the requested 3500 ft altitude, the 
PF makes a verbal request for the initial approach checklist 
("IACR* at t go * 686s) which, as shown by Figure 5.3, is processed 
by the S/O at t « 294s. This then initiates the series of IAC 
prompts by the S/O, shown in the next few minutes of the time-line. 
Each such prompt (e.g., "IAC #1" at t go * 666s ) results in a 
requirement on the PF or PNF to process that prompt (e.g., "Procsd 
IAC 1" at t » 663s) , and verbally echo the prompt back to the 
S/O. Subsequent processing of the confirmation by the S/O (e.g., 
"Prcsd IAC #i" at t go » 659s) , initiates generation of another 
prompt by the S/O (e.g., "IAC #2" at t go “ 639s). The IAC is 
concluded at t go * 533s by a "lACfn" message generated by the S/O. 

The descent to 3500 ft also triggers the altitude alert (AA) 
subsystem. Thus, at h * 4019 ft the AA becomes active, which 
requires the PF to turn it off at t go * 709s, which, in turn 
deactivates the AA at the next time step in the simulation. Note 
that this occurs prior to the flare-out initiated by the PF, thus 
providing an appropriate warning to begin the flare-out. 
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After the PF levels off near the requested 3500 ft altitude , 
ATC requests a deceleration to 160 kt. As before, this triggers a 
maneuver by the PF and a message confirmation by the PNF. Note 
that completion of this maneuver triggers a 5 deg flap request by 
the PF (tgQ • 656) , in accordance with the flap/speed management 
procedure outlined in Table 4.11. 

Following an ATC-requested turn to 180 deg (tg Q » 540s) , a 
second descent to 2000 ft is initiated (tg 0 » 498s) . The same 
activity sequence is followed as in the first descent , except that 
ATC makes a 120 deg turn request (tg Q * 450s) while the vehicle is 
descending. The message is processed by both crew members (as 
shown in Figure 5.3) , and confirmation is provided by the PNF. The 
PF, however, does not act on this request, but merely stores it in 
his memory. Once he levels off to the requested 2000 ft altitude 
(tg Q ■ 383s), he then immediately initiates the turn to 120 deg. 

As in the initial descent, the PF requests the checklist 
during his levelling off to his assigned altitude ( N FACR N at tg Q * 
390s). Again, this initiates a series of S/0 prompts and PF and 
PNF confirmations, lasting until checklist termination by the S/O 
("FACfn" at t go - 183s). 

While the PF is turning to the requested 120 deg heading, ATC 
notifies the crew that they are cleared to land (tg Q ■ 375s). This 
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message is processed by both the PF and PNF, and "enables" a series 
of velocity* altitude* and heading management procedures designed 
to ensure proper touchdown performance. 

The first of these is a deceleration to 150 kt* following 
completion of the turn to 120 deg (t go ■ 363s) . Once this speed is 
reached* 15 deg flaps are requested and set, by the PF and PNF 
respectively (t go - 349s). Shortly thereafter* the localizer 
becomes active* which results in an announcement by the PNF* which* 
in turn* triggers a turn to final by the PF. 

During the turn* the glide slope becomes active (t go » 326s)* 
and is announced by the PNF. After the turn is completed* the 
vehicle has achieved its final inbound heading* with a small 
localizer error (not shown on the time-line). Shortly thereafter* 
a 2 dot low glide slope error (also not shown) , triggers a 
gear-down request from the PF* which is acted on by the PNF (t go * 
273s). 


As the vehicle approaches the glide slope* the PF initiates 
two decelerations in accordance with the velocity maneuver 
procedures of Table 4.3i one to 140 kt at 1.5 dots low* and the 
second to the final approach speed of 139 kt* at 1 dot low. Bach 
of these trigger new flap requests and settings (to 25 and 30 deg) 
in accordance with the flap/speed management procedure of Table 
4.11. 
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When the vehicle la 0.5 dots below the glide slope , the PP 
initiates a pitch down (t go - 218s) . This flare sets up the final 
descent followed for the remainder of the approach. 

During the descent, the PNF announces ON activity ("OMann" at 
tgQ « 151s), and makes the required 1000 ft, 500 ft, and 
"approaching minimum's (300 ft) callouts. He is also monitoring 
out-the-window, and, with the 250 ft ceiling simulated, makes the 
appropriate RNIS callout at tg Q ■ 35s. 

While the PNF is monitoring for this RWI3 callout, the MM 
alert sounds, and both pilots process this message. The PNF should 
announce MM activity during this time, but is engaged in monitoring 
the altimeter for his required "minimums" callout at 200 ft. He 
makes the altitude callout slightly early (at h*215ft and t go » 
31s) , and by the time he can attend to making the MM announcement, 
the MM becomes inactive (at t^ 0 « 30s). Since the announcement 
procedure, as programmed, requires the MM to be active for an 
announcement to be made, the PNF remains silent. 


The PF begins decelerating to the required threshold speed of 
134 kt slightly early (at t go » 26s) and 10 ft above the 150 ft 
altitude specified in Table 4.3. The final flare is initiated 
about 1 sec late and 10 ft below the 50 ft altitude specified in 
Table 4.5. During this flare the GS signal turns off because of 
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the flare away from the glide slope beam, and the LOC signal turns 
off at touchdown, as required by the LOC characteristics modelled 
in this simulation (see Appendix B) . 

5.3.2 Monitored Approach (MAP) 

Since the monitored approach procedure (MAP) differs from the 
standard approach procedure (SAP) only in the last few hundred feet 
of the approach, we show only the last half-minute of the MAP 
time-line in Figure 5.5. The assumption here is that, during the 
early portion of the approach, the CAPT is the PNF, and the F/0 the 
PF. Thus, the MAP milestone time-line for events earlier than 
those shown in Figure 5.5 would be identical to those shown for the 
SAP in Figure 5.4, with the flying duties of the CAPT and F/0 
reversed. 

The time-line of Figure 5.5 begins with a RWIS recognition by 
the CAPT (near the ceiling altitude of 250 ft) , and subsequent 
control transfer. As in the SAP time-line, the requirement to make 
the 200 ft altitude callout causes the PNF (now the F/0) to miss 
the announcement of MM activity. The remainder of the descent, 
flare, and touchdown closely parallels that of the SAP shown 
earlier. 
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Figure 5.5s Monitored Approach Time-Line (case 1LS) 

"time VEHICLE STATE CREW ACTIVITY FLIGHT MILESTONES 

TGo Alt Vel Head Captain FOfficer SOfficer 


(See timeline for SAP) 






"Takeover" "Relinquish" 

MAP: 

Control swap 





PrcsdMMon 








PrcsdMMon 




34.4 

244 

139 

90 

AltCO 




30.6 

206 

138 

90 








MM inactive 


30.4 

204 

138 

90 

PrcsdAltCo 




29.2 

192 

138 

90 


End 

DSCNT Begin 

DECEL 






to 

134.0 kts 


26.2 

161 

138 

90 


End 

DECEL Begin 

DSCNT 

15.4 

52 

133 

89 


End 

DSCNT Begin 

FLARE 






to 

0.0 deg 


14.6 

44 

133 

89 


GS 

off 


12.6 

27 

133 

89 


LOC 

off 


6.0 

0 

133 

90 






- 134 - 


Report Mo. 4374 


Bolt Beranek and Newman Ino 


5.3.3 High Workload Approach (SAP/ATCHI ) 

Figure 5.6 shows the milestone time-line corresponding to the 
high workload approach scenario (ATCHI) conduoted under standard 
approach procedures. The ATC commands associated with this 
scenario are given in Table 5.1. 

A comparison with the nominal workload approach points out a 
number of interesting differences in procedural activity. We 
discuss a few of these differences in the following paragraphs. 

Pigure 5.6 shows the high workload procedural activity to be 
identical to that of the nominal approach of Figure 5.4 up until 
t go » 615s, when the early ATC turn request is made. The PF'a 
response is to initiate the turn (at t go » 613s) and the PNF's 
response is to confirm the request (at t g0 ■ 612s). A comparison 
with the nominal case shows that this requires the PNF to 
interleave this confirmation with a checklist verification ("IAC 
#3" in response at t go ■ 606) to the S/O's prompt. 

While the F/O and S/O continue the IAC, the PF finishes the 
turn to the new 180 deg heading, and, in response to the 
accelerated ATC descent request (t go ■ 575s), begins the flare to 
achieve the desired sink rate. Shortly thereafter (t go ■ 533s), 
the S/0 completes the IAC. A comparison with the nominal approach 
time-line shows the IAC completed during the turn to 180 deg, and 
prior to the descent maneuver. Thus, in the high workload 
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Figure 5.6.* Milestone Time-Lines High ATC Workload Scenario (case 1LS) 

TIME VEHICLE STATE CREW ACTIVITY FLIGHT MILESTONES 
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Figure 5.6 (cont.) 
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Figure 5.6 (cont.) 
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Figure 5.6 

(cont. ) 
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Figure 5.6 (cont.) 
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Plgure 5.6 (cont. ) 
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Figure 5.6 (cont.) 


187. 

8 

202 

139 

90 

187. 

2 

195 

139 

90 

183. 

2 

153 

139 

90 

172. 

,4 

46 

133 

90 

171. 

.4 

36 

133 

90 

168. 

.6 

14 

133 

90 

163. 

.8 

1 

133 

89 


PrcedAltCo 


MM Inactive 

End DSCNT Begin DECEL 
to 134.0 kts 

End DECEL Begin DSCNT 

End DSCNT Begin FLAKE 
to 0.0 deg 

GS off 

End FLARE Begin S & L 


-142 


Report Mo. 4374 


Bolt Beranek and Newman Inc 


approach, the IAC is completed "late", if we assume that there 
exists a requirement to complete it prior to leaving the 3500 ft 
assigned approach altitude. 

Later in the descent toward the new assigned altitude of 2000 
ft, the high and nominal workload time-lines again parallel one 
another (i.e., tg Q « 450s on the nominal corresponds to t go = 480s 
on the high workload approach) . This parallel procedural activity 
continues through level-out at 2000 ft, and down to GS turn on (tg Q 
= 409s on the high workload approach and tg Q = 326s on the nominal 
workload approach) . At this point considerable procedural activity 
differences become evident. 

In the high workload approach, the turn to final (at tg Q = 
410s) begins relatively close in to the field, with a lateral 
positioning that places the vehicle slightly more than 2.5 deg off 
the LOC plane (as measured about the GS transmitter) . As noted in 
Appendix B, this ensures that the GS indicator will be inactive; 
however, approximately one second later, the vehicle comes to 
within 2.5 deg of the LOC plane, and the GS indication provides the 
crew with s GS measurement. Because of the relative closeness to 
the field, however, the GS indicator does not become active at the 
customary -3 dots; instead it shows a relatively small -1.4 dot 
error. 
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This small error immediately plaoes the crew "behind” in the 
approach, since the gear should have been dropped at 2 dots low, 
and the vehicle slowed to 140 kt at 1.5 dots low. The time-line of 
Figure 5.6 shows an almost immediate gear down request by the PF 
(at tg Q ■ 408s) , but this is not acted on immediately since the PNF 
is busy announcing GS activity (at t go °* 407s) . To compound 
matters, the PF cannot initiate the required deceleration to 140 kt 
until he completes the turn to final, which doesn't occur until t^ 
- 369s. 

By this time, the glide slope error has been reduced to less 
than 0.5 dot, which means that the PF is "behind" in both his 
required deceleration to the approach speed of 139 kt, and his 
pitch down to the final glide path. As shown in the time line, he 
"stacks" both of these commands immediately after ending the turn 
to final, in an attempt to catch up. 

Once having initiated the pitch down (at t go * 358s) , two 
neglected flap requests are made, one which should have been made 
after the deceleration to 140 kt, and the other after the 
deceleration to 139 kt. While the PF then concentrates on 
stabilising the vehicle on the glide slope, the PNF sets the flaps 
(at t go - 355s and t go ■ 349s) , and continues with the final 
approach checklist. Because the late flap requests delay the 
checklist progress ^e FAC is not completed until t go ■ 303s, after 
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the vehicle has passed through the OM beacon. Thus, in the high 
workload approach, the FAC is completed "late", if we assume that 
there exists a requirement to complete it prior to OM activity. 
Note also that the PNF misses making the OM announcement, because 
of his preoccupation with the FAC. 

Although slightly "late” at this point, the crew has 
effectively caught up with the nominal workload approach. Thus, 
the 1000 ft altitude callout is made appropriately (at t go * 261s), 
and the subsequent callouts by the PNF, and maneuver by the PF, 
directly parallel those of the nominal workload approach. Note 
that because of slight numerical differences in the nominal and 
high workload simulations, the end-points of the two runs differ 
slightly: the former terminates at zero altitude with a small 
negative sink rate, while the latter terminates at 1 ft altitude, 
and begins to "float" down the runway. No attempt has been made to 
"fine-tune” these differences out of the simulation, since this 
type of terminal performance is beyond the scope of the current 
approach to landing study. 

5.3.4 Model Parameter Variations 

Variations in crew model parameters considered here will 
affect all aspects of the approach. Inasmuch as the trajectory 
performance is most likely to to biased by the sample effects 
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associated with using a particular noise sequence (and by the 
simplified disturbance model as well) , we will refrain from a 
detailed discussion of this aspect of the simulations. Suffice to 
say that the high noise cases did result in poorer glide path 
control on final approach, as expected, and these variations and 
others had some effect on the final flare, as noted below. 

On the other hand, estimation error uncertainty is somewhat 
less sensitive to sample effects because it depends primarily on 
noise covariances rather than on the particular noise sample. 
Table 5.4 gives the standard deviation of the estimation errors of 
several states (h,V, i|>,y) at the decision height of 200'. It is 
clear from these results that increasing disturbances or decreasing 
attention increases the standard deviation of the estimation error 
(uncertainty) as expected. Increasing lock-up times has a small 
effect on PF's uncertainty and virtually none on that of PNF. 
There is virtually no effect on uncertainty resulting from the 
change in the default gains. 

The difference in ATC scenario doesn't have an effect on 
estimation uncertainty for the nominal configurations (cases #1) ; 
there is some difference in the high noise, low attention cases, 
(#4) but a consistent trend is not apparent. The differences 
between MAP and SAP are also not completely consistent except that 
the effect of changing roles is reflected in the estimation 
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Table 5.4: Standard Deviation of Estimation Errors at Decision Height 


Case # 

h(ft) 

Vitt/B) 

(deg) 

y(deg) 


Pf 

PNF 

PF 

PNF 

PF 

PNF 

PF 

PNF 

1LS 

HI 

5.2 

.21 

.16 

.36 

.51 

.13 

.13 

1LM 


6.3 

.16 

.21 

.25 

.42 

.13 

.13 

2LS 

12.4 

10.9 

.73 

.81 

.77 

1.24 

.53 

.59 

3LS 

7.9 

6.3 

.24 

.16 

.41 

.61 

.15 

.14 

4LS 

14.5 

11.4 

.77 

.91 

•92 

1.94 

.56 

.60 

4LM 

12.3 

11.8 

.83 

.79 

.83 

1.84 

.64 

.53 

5LS 

7.6 

5.2 

.24 

.16 

.46 

.59 

.13 

.13 

6LS 

7.0 

5.3 

.20 

.16 

. 37 

.52 

.13 

.13 

1HS 

7.1 

5.4 

.21 

.16 

.39 

.58 

.13 

.13 

1HM 

5.3 

6.4 

.16 

.21 

.27 

.41 

.13 

.13 

4HS 

12.7 

12.3 

.70 

.85 

1.48 

1. 84 

.50 

.61 

4HM 

13.1 

11.8 

.87 

.79 

.96 

1.84 

.65 

.55 
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performances of P7 and PNF. In addition, it is interesting that, 
with the exception of the high workload, high noise case, the PF's 
estimation uncertainty in altitude is reduced for the MAP 
procedure . 

For the most part, the variations investigated did not have 
major effects on the time-lines. The time-lines for case 3 lS did 
not differ from those of case 1LS, showing that for a small 
disturbance level and relaxed tempo a significant reduction in 
attention from high levels is possible. This is both expected and 
as it should be. 

The most striking difference in time-lines with regard to 
procedural execution occurs near the end of the high disturbance 
level approaches. As illustrated in Figure 5.7 for case 4LS 
(similar results are obtained for case 2LS) , the deceleration to 
threshold speed is late (h<100'). Typically, this is not 
sufficient to cause a missed approach but it could result in a 
modified landing procedure (not simulated) , in which PF would 
forego decelerating to threshold speed and would increase the final 
flare rate. The late execution of the deceleration procedure in 
these cases is due to the larger uncertainty in altitude (see Table 
5.4) compounded by a delay in going "heads-up" after hearing the 
KWIS call. 


- 148 - 


Report No. 4374 


Bolt Beranek and Newman Ine* 


Figure 3.7 also shows that PNF falls to make the "approaching 
mlnlmums” callout in the high noise situation. This appears to be 
the result of the large uncertainty in altitude estimation along 
with (our) requirement that the PNF be 95% certain of being within 
25 ft of the callout altitude before making the callout. 

The imposition of longer procedure lock-up times naturally 
results in a longer time to complete the various procedures.* This 
does not have any noticeable effect until the very end of the 
approach. Then, as in the high noise case, the final deceleration 
is delayed and the landing altered. 

The effects of increasing the default gains for control and 
monitoring were as expected. Control and estimation performance 
improved slightly. Almost all procedures were executed in timely 
fashion, though there was some delay associated with the 
requirement for the other SCP's to exceed .6 (rather than .3) 
before they could be selected. The one exception is the OM callout 
which was not made in this case. This miss occurs because the gain 
for that callout does not exceed .6 before the outer marker turns 
off. 


* increased lock-up times could also be used to simulate the 
demands of another (unmodelled) problem. 
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Figure 5.7s Final Portion of Time Line for High Disturbance Level 
(Case 4LS ) 
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The results for crew parameter variations (attention, lock-up 
time and default gains) indicate that, while PROCRO does exhibit 
some sensitivity to these variables, there is a desirable degree of 
latitude in selecting specific values for them. 
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6. CONCLUDING REMARKS 

PROCRU, a new simulation model for analyzing crew procedures 
in approach to landing, has been described. The model is a system 
model that can account for vehicle dynamics, environmental 
disturbances and crew activities in information processing, 
decision making, control and communication. Crew sub-tasks are 
defined based on a time-line analysis of nominal procedures. 
Information processing and control behavior is modelled after the 
approach utilized in the Optimal Control Model. Decision making 
behavior is based on maximizing subjective expected gain. The 
result is a complex, stochastic model for analyzing the impact on 
approach and landing of system, procedure and crew variables. 

The PROCRU model has not been validated experimentally, though 
the information processing and control parts of it have been tested 
in manual control experiments. In addition, for this initial 
implementation, several important aspects of human behavior have 
been simplified or neglected. Nonetheless, it is likely that even 
in its present state of development, with some upgrading of wind 
models and vehicle dynamics, PROCRU could be used to analyze many 
questions of interest regarding procedures for approach and 
landing. Candidate areas of application would include: 


\ 

] 

i 
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1) Application of the model to simulation of other approach 
scenarios. This oould include an examination of other high 
workload radar- vectored approaches* and variations in aircraft 
configurations (e.g., engine out)* IL8 beam geometries* runway 
and terrain elevations* and winds and gusts. Clearly* a large 
range of scenario parameters oould be studied with the 
facility now provided by the PROCKD model. 


ii) Model analysis of procedural variations. This oould 
Include analysis of different category landings* given 
standard operating procedures* and a determination of the 
impact of procedural variations away from a given standard 
operating procedural set. By examining variations in 
time-line activity* crew tempo* monitoring requirements* and 
trajectory propagation* a model-based evaluation of procedural 
improvements could be conducted* and thus provide the basis 
for the potential development of a rational and analytic 
procedural design methodology. 

ill) Analysis of the effects of changes in the cockpit 
environment resulting from the introduction of various control 
and display aids. Thus, one could, for example, compare 
manual and coupled approches or examine the effects of auto 
throttles, HUD's, etc. 

iv) Application of the model to other flight phases, such as 
takeoff or the touchdown/rollout/braking phase. As in the 
approach to landing study, an analysis of the impact of 
various vehicular, procedural, and environmental factors could 
be conducted, to provide a model-based assessment of crew 
workload and flight performance variations. 

v) Application and validation of the model using detailed 
NTSB incident and accident reports. By "model-matching” the 
simulation results to one or more documented case studies, 
open areas of model implementation could be identified, and 
modifications proposed to ensure procedural parallels between 
simulation and actual time-line. In addition, such a 
modelling effort would provide a means of testing various 
hypotheses of accident/incident causation, and could directly 
suggest means of ameliorating or eliminating such causal 
factors. 


There are also many directions for extending and improving 
PROCRU j some simple, some more complicated. A few of these are 
discussed below. 
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In the area of lnoreased model sophistication, a number of 
potential improvements suggest themselves. By introducing a 
failure capabilty in the various vehicle subsystems, and providing 
the crew members with a failure detection and identification logic, 
abnormal and emergency response models could be studied. 

Naturally, this would require the specification of additional 
procedures to handle such situations, but the current model 
structure is ideally suited to handle this expansion, and the j 

currently available operations handbooks provide a reasonably I 

I 

1 

concise specification of the required procedures. 

| 

By continuing an interaction with active flight crew 

j 

personnel, more sophisticated models of procedural gains could be 
developed. These could reflect not only the explicit procedural 
requirements stated in the operations manual, but also the implicit 
requirements, and the crews" goals, motivation, and experience. We 
would expect that the model requirements would guide us in our crew 
queries, and their responses would provide us with additional data 
for developing more sophisticated and representative procedural j 

gain expressions. ] 

i 

I 

The development and implementation of a more detailed model of 

i 

out-the-window visual cue processing could provide additional 
insight concerning the dynamics of runway acquisition, and the 
impact of different monitoring strategies. Such a model would also 
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have the potential of providing for gradual acquisition of runway 
cues, and not be limited to the all-or-none visibility conditions 
conventionally utilised in XLS approach studies. 

Finally » there are several user-oriented improvements that 
would enhance PROCRU's utility. The addition of a graphical output 
capabilty and of statistical analysis programs would greatly 
facilitate the rapid and thorough analyses of approach performance. 
Modifications to increase computation speed (such as modifying the 
program to allow variable length integration time steps) would be 
very useful for reducing the cost of Monte Carlo simulation 
analysis. 
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APPENDIX At GLOSSARY 


A: altitude (ft) 

AA: altitude alert 

AC* altitude command from ATC (ft) 

AEs airport elevation (ft above sea level) 

AFE: above field elevation 

A/Rt as required 

ATCt air traffic control 

ATIS: airport traffic information service (weather and 

visibility info) 

CAT I: category I landing, with a DH of 200" AFE, and an RVR 

of 2400 ft 

CFL: cleared for landing 

CSDx constant speed drive 
DH: decision height (ft) 

EPR: exhaust pressure ratio setting for engines 

FAC: final approach checklist 

F/O: First Officer 

fpm: feet per minute 

G/A: go around 

GS: glide slope 

GMT: vehicle gross weight 

H: heading (deg) 
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HC: heading command from ATC (deg) 

HSI: horizontal situation indieator, driven by localizer beam 

IACt initial approach checklist 

ILSt instrument landing system 

IMt inner marker 

kt: nm/hr 

LOC: localizer 

LOMx outer marker 

MA: missed approach 

MAPs missed approach procedure? monitored approach procedure 

MM: middle marker 

NAV: navigation 

nm: nautical mile 

OM: outer marker 

PF: pilot flying 

PNFx pilot not flying 

RF: radio frequency 

RVR: runway visual range (ft) 

RW: runway 

SAP: standard approach procedure 

SB: speed brake 

SH: search height (ft) 

S/0: Second Officer 


A- 2 
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SOPt standard operating procedures 
TDt touchdown 
Vt velocity (kts) 

VAPPt desired approach speed, determined by VBUG and 
wind/gust correction factor 

VBUG: bug speed, set on airspeed indicator, and 

determined by VREF and landing flap choice 

VC* velocity command from ATC (kts) 

VGDST: gust velocity 

VHFx very high frequency 

VOR/ADF : VHP omni range/automatic direction finder 

VREF: reference speed, determined by vehicle gross weight 

VTHRESH* desired speed at RW threshold, determined by 
VBUG and gust correction factor 


VWIND: 


wind speed 
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Appendix Bt GLIDE SLOPE AND LOCALIZER 
B.l Basic Geometry 

Glide slope and localizer geometries are shown in Figure B.l. 
The runway is assumed to be 10000 ft long, with the glide slope 
transmitter located 1150 ft beyond runway threshold and the 
localizer transmitter located 1000 ft beyond the end of the runway. 
The nominal glide slope is assumed to be 2.5 deg, with a 
sensitivity of 1 dot/0.35 deg. The localizer is assumed to be 
aligned along the east-west direction, and to have a sensitivity of 
1 dot/deg. 

The figure also shows specific above field nominal altitudes 
along the glide slope, with the corresponding range-to-go, measured 
in the plane of the runway, and referenced to glide slope 
transmitter location. The nominal touchdown point is 1140 ft 
beyond the glide slope transmitter, assuming flare initiation at 50 
ft over runway threshold. 

B.2 Functional Description 

B. 2.1 Localizer 

Figure B.2 shows a bottom view of the basic localizer 
geometry, referenced to the local geographic navigation frame 
(north, east, down). The parameters specifying the geometry are* 
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Figure B.2: Basic Localizer Geometry (bottom view) 
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^lOC inbound heading of LOC beam 

( x LOC'YLOc) location of LOC transmitter, in N frame 

coordinates 

(x,y) location of vehicle, in N frame coordinates 

The prime frame indicated in the figure is the LOC frame, with its 
origin at the LOC transmitter, and with the x'-axis aligned with 
the inbound heading. In this coordinate frame, vehicle position is 
given by* 


H - 

'- os ♦lot 

Sin ^ LOC "I f It * X L0cl 

(B.l) 

lyj 

? in ^ LOC 

C0S *LOC J l y ' y U>cJ 


Range to the LOC 

transmitter 

is then given by 



r LOC * 

l(x') 2 + (y’) 2 ] 1/2 

(B.2) 

and LOC error, as 

defined in 

the figure, is given by 



e LOC 

“ tan -1 [y'/(-x' r ) ] 

(B.3) 


Our model of the localizer assumes minimum and maximum operating 
ranges, so that if 

max rain 

r LOC r LOC or r LOC < r LOC 

the localizer is "inactive". A similar angular limit was imposed, 
so that if 
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£ LOC > 6 loc 

the localizer is "inactive". 

Particular parameters chosen for the nominal geometry are 
given in Table B.l. 

B.2.2 Glide Slope 

Figure B.3a shows a bottom view of the basic glide slope 
geometry, referenced to the local geographic navigation frame. The 
parameters specifying the geometry are: 

^ L oc inbound heading of LOC beam 

( x GS'yGs) location of GS transmitter, in N frame 

coordinates 

(x,y) location of vehicle, in N frame coordinates 

The double prime frame indicated 'in the figure is the GS frame, 
with its origin at the GS transmitter, and with the x^'-axis 
aligned with the inbound heading. In this coordinate frame, 
vehicle position is given by: 

f c ° 8 ’LOC 8ln ’’Loci [ X * X GS*| 

fc 8ln ’’loc 008 ’loc J L y " y GSJ ' 

Range to the GS transmitter is then given by: 
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Table B.lt Localizer Parameters 


Parameter 

Value 

Dimension 

^LOC 

90 

deg 

tx LOC' y LOC* 

(0,9850) 

ft 

.min max. 
' r LOC ' r L0C' 

(10,120000) 

ft 

max 

e LOC 

2.5* 

deg 


* value used for model simulation; Chapter 2 analysis used 2.0 deg 

Table B. 2 : Glide Slope Parameters 

Parameter Value Dimension 


^LOC 

90 

deg 

^ X GS ' y GS* 

(0,0) 

ft 

, min max. 

1 GS ' r GS * 

(10,90000) 

ft 

max 

e GS 

2 

deg 
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*GS * K*") 2 ♦ (y") 2 ] 1/2 (B.5) 

Figure B.3b shows a side view of the glide slope geometry. 
The parameters specifying the geometry arei 

0 qq elevation angle of the glide slope 

h vehicle altitude ATE 

The vehicle elevation angle is given by 

0 •tan” 1 [h/(-x") J (B.6) 

so that the glide slope error, as defined in the figure, is given 
by 


e GS * ®G8 (B.7) 

Our model of the glide slope assumes minimum and maximum operating 
ranges, so that if 

max min 

r GS r G8 or r GS < r GS 


the glide slope is "inactive”. A similar vertical plane angular 
limit was imposed, so that if 



max 

GS 


the glide slope is "inactive”. Finally, a lateral angular limit 
was implicitly imposed, by not allowing the glide slope to be 
active until the vehicle was within of the localizer plane, 
as measured about the glide slope transmitter. 
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Particular parameters chosen Cor the nominal geometry are 


given in Table B.2. 
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APPENDIX C: VEHICLE DYNAMICS 

C.l Non-Linear Equations of Motion 

Assuming the vehicle is a point mass acted upon by aerodynamic 
and gravitational forces# we can write the following standard 
equations of motion: 


mv 

• Ycosa - D - mgsinY 

(C.la) 

mvcosy$> 

■ (L+Tsina)sin<J> 

(C.lb) 

-mvY 

■ -(L+Tsina) cos<J> + mgcosy 

(C.lc) 

• 

X 

» vco By cos 

(C.ld) 

• 

y 

m vcosy sintp 

(C.le) 

• 

z 

■-vsinY 

(C.lf) 


where the vehicle "states" are: 

v: speed with respect to the local navigation frame 

\j>: heading measured clockwise with respect to north 

Y : flight path angle measured up from the local horizontal 

(x,y,z): vehicle position in the local navigation frame north# 

east# and down directions. 

and where the vehicle "controls" are: 

T: thrust (assumed to be along the vehicle's x-axis) 

a : angle-of-attack between the vehicle's x-axis and the 

velocity vector 

4> i bank angle between the vehicle's y-axis and the local 
horizontal 


C-l 








>j!«h^vt'W ^p^a^ujK»9Rsp»jip. -g xpra t i w i r y^ jpr T :«’«m v > 
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The form of the lift and drag forces (L and D) will be discussed 
in the next section. 

If we assume that both angle-of-attack and flight path angle 
are small (which is the case, as shown in the main text) , and 
replace the vehicle's z-position with the. negative of its altitude 
h, (C.l) then becomes: 


mv - T-D-mgy (C.2a) 

mv^i = (L+Tct)sin<j) (C.2b) 

\ mvy = (L+Ta) coS(j> -mg (C.2c) 

t x = vcos\j> (C.2d) 

| y = vsinty (C.2e) 

! h = VY (C.2f) 


C.2 Lift and Drag 


The lift and drag forces can be expressed as follows: 

L = qSC L 
D = qSC D 

where the reference area S is a fixed constant and where the 
dynamic pressure is given by 



An exponential density model is assumed, so that 



(C. 3a) 
(C. 3b) 


l ; 

\ l 


02 
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where 


P Q * 0.002377 slug/ft 3 (C.6a) 

h Q = 33# 333 ft (C.6b) 

The lift and drag coefficients are assumed to have the following 
functional dependence: 

C L * c l (ou 6 f ) 

C D = C D* a ' S f' 6 g* 

where 

a: angle-of-attack 
6^: flap setting 
6^: gear setting 

In the above functional forms# Mach number dependence has been 
ignored# because of the relatively small variation in Mach 
number occurring over the approach and landing trajectories under 
study. In addition# it is assumed that gear settings have 
negligible influence on the lift coefficient. 

The lift coefficient is assumed to be linear in angle-of-attack# 
with the flaps contributing in an additive fashion: 

C_ = C_ (a- a) + C. (C.8) 

L Jj Z L e 

a f 

where 


(C.7a) 

(C.7b) 


C : lift coefficient slope (constant) 

"ot 

a : zero lift angle-of-attack, for no flaps (constant) 
z 
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and where the flap contribution is assumed to be proportional to 
flap setting: 

C L f " C L ftX (6 f /*? aX> (C.9) 

where 

iri^x 

C_ : maximum lift contribution from flaps (constant) 
max 

<5^ : maximum flap setting (constant) 

Specific lift coefficient parameter values assumed for the current 
727 study are summarized in table C.l. 


The drag coefficient is assumed to be quadratic in angle-of- 
attack with the flaps and gear contributing in an additive fashion 


where 


" C D 0 + n f C L (ot ~ V 

0 a 


+ C n + C. 


(C.10) 


C : parasite drag (constant) 

u 0 

n^: drag efficiency factor (constant) 


and where the flap contribution is assumed to be proportional to 
flap setting: 


c D f = C S^ X ( V 6 ? ax > 


(C.ll) 
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Table C.l: Lift 

Coefficient 

Parameter Values 

Parameter 

Value 

Dimension 

S 

1560 

ft 2 

m 

4658 

slug 

°L 

5.1 

rad ^ 

a 



a z 

f-0.175 

/rad 


*-10.0 

'deg 

rflax 

% 

1.0 

— 

.max 

6 f 

40 

deg 

Table C.2: Drag Coefficient 

Parameter Values 

Parameter 

Value 

Dimension 


0.040 

— 

jnax 

D f 

0.010 

— 

r max 

0.010 

— 

1 / 

g 



n f 

0.080 

— 


05 


i i I. ' ll 
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where 


cj? ax : maximum drag contribution from flaps (constant) 


The gear contribution is assumed to have the following form: 


when 5. 


g 


,max 


up 

down 


(C.12) 


where 


Cj5J ax : maximum drag contribution from gear (constant) 

D g 

Note that the drag coefficient expression (C.10) assumes, for 
simplicity, that the efficiency factor n^ is independent of flap 
setting . 


Specific drag coefficient parameter values assumed for the 
current study are summarized in Table C.2. 


C. 3 Decomposition of States and Controls 

Equation sets (C.2) through (C.12) define the vehicle's 
state output response to a specified set of control inputs. In 
order to "solve" this non-linear, time-varying set of equations, we 
make the following set of assumptions: 


Report No. 4374 


Bolt Beranek and Newman Inc 


1. Flap and gear settings, although "inputs" to the system, 
are not considered available for continuous control of the 
system. Rather, they are treated as discrete mode configura- 
tion variables, which are procedurally defined, and which 
undergo step changes in their associated settings. 

2. Thrust, angle-of-attack , and bank are taken as the 
available control inputs, and are assumed representable by 
a constant plus a small perturbation: 

T = T c + 6T (C.13a) 

a = a c + 6a (C.13b) 

<j» = ,j) + fi(j, (C.13c) 

where the C subscript indicates a constant and the 6 ( ) 
indicates a perturbation quantity. 

3. The vehicle states are assumed representable by a "nominal" 
value plus a small perturbation, according to:* 


V = v„+<$v 
N 

(C .14a) 

= 'J' N + SV' 

(C .14b) 

Y * Y n + 5y 

(C .14c) 

X * Xjj+fiX 

(C. 14d) 

y = V 6y 

(C.14e) 

h = hjj+6h 

(C.14f) 


♦This notation differs slightly from that in Chapter 3 but 
the correspondence is evident. 


C-7 
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4. The nominal velocity , heading, and flight path angle 
are chosen to be the sum of specified constant plus rate 
terms*: 


** * vV 

t n ■ VV 

and the nominal altitude is chosen to have an 
yet unspecified) constant acceleration term*: 

h N * VV + 3 V 2 (C. 15f ) 

Expressions for the nominal x and y positions will be derived 
later in section C.5. 

The rational for these assumptions and choice of nominals 
will become evident in our discussion later in section C.6. For 
now, however, we will use these equation sets to decompose the 
earlier non-linear dynamic equations into two simpler, and analyti- 
cally tractable sets: a "nominal" equilibrium set and a linear 

perturbation set. We begin by decomposing the lift and drag 
forces. 

C . 4 Decomposition of Lift and Drag 

C.4.1 Dynamic Pressure Expression 

Dynamic pressure variations are due to both variations in 
density and velocity. The density variation is obtained by 
* The subscript c denotes a constant value. 


(C.15a) 

(C.15b) 

(C.15c) 

additional (as 
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substituting (C.15f) into (C.5) to yield: 

p * p e- h </ h oe- ,i c t / h oe-? i 'c‘ 2 /ho ,-«Vh 0 


(C. 16) 


The first exponential term is a constant, so define 


. _ -h/h 

p c ■ P Q e c' o 


(C.17a) 


The second exponential term can be approximated by an expansion. 

The largest constant-rate altitude change occurrinq in the trajectory 
is 6500 ft (see Table 4 of Chapter 2), so that, with (c. 6b), 

IV/Vmax i °- 2 

which suggests that a second-order expansion provides an adequate 
approximation: 


rV /h 0 : 1 - V . 1 (VY 

h„ ? V h J 


(C. 17b) 


The third exponential term can also be approximated by an expansion. 
The largest vertical accelerations occur during a flare to a new 
flight path angle. If we assume a maximum 1000 ft drop during such 
a flare, and conservatively attribute all of the drop to the vertical 
acceleration, then 


1 •• 2 

5<V vv 


o max 


0.03 « 1 


so that 


-i h t 2 / h . 
e 2 c o - 


i - \ (h c t 2 /h 0 > 


(C. 17c) 
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Finally, since the altitude perturbation is by definition small, 

e -6h/h 0 z i - 6 h / h (C. 17d) 


Substituting (C.17) into (C.16), and dropping cross-product terms 
involving small quantities, we obtain the following expression 
for density: 


P = P c 


/h c t \ 2 

- i / 

!» t 2 H 

r, . oil 


2 l 

t/J 

L h oJ 


(C.18) 


The velocity contribution to dynamic pressure is obtained by 
use of (C.14a) and (c. 15a) : 


2 2 
v = v_ 
c 


[‘*¥ •“] 


(C. 19) 


From Table 4 of Chapter 2, it can be seen that the ratio of velocity 

change (v t) to starting velocity (v ) is greatest for the 20 kt 
c c 

deceleration starting at 190 kts. Thus, 


v c t/v c I : o.n 

max 


Since the velocity perturbation is by definition small, we can then 
expand (C.19) to obtain 

2 


2 ~ 2 
v ~ v 

c 


[‘ *’%*(%) *■£] 


(C.20) 


where we have dropped the second-order perturbation term and the 
cross-product involving the velocity perturbation and the "small" 


term (v c t/v c ) . 


f 


!1 




; s 

: 1 

■ 3 


u 


ij 


C-10 
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m 
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The dynamic pressure expression can now be found by substituting 
(C.18) and (c. 20) into (C.4), and dropping second-order perturbation 
terms, cross-product terms involving a perturbation quantity and 
a "small" time-dependent term, and cross-product terms involving two 
"rate" terms* (e.g., v . The resulting expression is given by: 

5 : q e + q c fut) + 2 & - j£] <c.2i> 

c O 

where 



(C.22) 


and 

X (t) 




(C.23) 


Note that q is expressed as the sum of a constant, a time-varying 
term, and a term composed of state perturbations. 

C.4. 2 Lift and Drag Expressions 


Lift and drag variations are due to variations in their 
respective coefficients, and to variations in the dynamic pressure. 
The coefficient variations are obtained by substituting (C.13b) 
into (C.8) and (C.10) to yield: 


C L * C L <°c - «*» + C L , + C L„ *° 
a ra 


(C. 24a) 


C D * C D ft + »f V <V “l 1 + % + C D + 2n f C L ft (Ct c" a z )6a 

O a r g a 


(C. 24b) 

* 

Neglecting the product of two "rate" terms is iustified on the 
basis of maneuver selection discussed later in section C.6, where, if 
one rate (e.g., v ) is non-zero, then all others must be non-zero so 
that all such "cross products" must be zero. 
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where the second-order term in 6a has been dropped from the drag 
expression. Assuming that the flap and gear settings remain 
constant, then C L , C Q , and c p reraain constants, by (C.9), (C.ll), 
and (C.12). If wl define the fSllowing constant coefficients, then 


V - C L l W + C L, 

c a £ 

C D - C D 0 +n fV<VV 2 + C D + =D 

CO L a Of 9 


(C. 25a) 
(C.25b) 


and assume that both are non-zero, then (C.24) becomes 


^1 + fLa 6a ^ 


(C. 26a) 


( 


C D ( 1 + 2n f C La ( V 


V 6a ) 


(C. 26b) 


The lift and drag expressions can now be found by substituting 
(C. 21) and (C.26) into (C.3), and dropping second-order perturba- 
tion terms, and cross-product terms involving a perturbation and 
the "small" quantity X(t). The resulting approximations are 
given by: 


L + L [X ( t) + 2 & - & + ^«6al 
c c L v n h 0 C L. J 


D c + D r.X(t) + 2 p - 

L C 


h o 


2n.C 


tr l. 


(a -a.) 


V_ 6aJ 


(C .27a) 
(C.27b) 


where 


q c SC I. 


(C .28a) 


D * q SC„ (C.28b) 

C C D 

C 
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Note that both lift and drar are expressed as the sum of a constant# 
a time-varying term# and a term composed of state and control 
perturbations . 

C. 5 Decomposition of Equations of Motion 

We now proceed to decompose the non-linear equation set 
defined by (C.2), using the control variable expressions of (C.13)# 
the state variable representations of (C.14) and (C.15)# and the lift 
and drag relations of (C.27). 


The velocity equation of (C.2a) is expanded by use of (C.13)# 
(C.14)# (C.15)# and (C.27b)# to yield# after rearrangement# the 
following expression: 


m 


(v + gy)+D - T = -m<5v ■[ c l 5v - mgfiy +/ D cVh 
c c 0 c W 'V (C. 


29) 


♦ 6T - d fiot -mgy t - D X(t) 


where# for convenience, we have defined 

<» e - ^ c Sn f C 2 La (c c - « z ) (C.30a) 

Note that the RHS of (C.29) is composed of time- functions and 
perturbation quantities. If we consider the special case where the 
perturbation quantities are zero at t=0# then# from (C.23), the 
RHS must be zero. But the LHS is a constant. Thus# both sides 
must be zero for all time: 


v 


c 



<V D c > "9 


Y 

c 


(C. 31a) 


C-13 




E 

( 


* 

{ 

t 


| 


t 

*1 
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where, for convenience, we have defined 

f v (t> * +(!c)*Ct) (C.33a) 

Note that we now have an "equilibrium" solution for the original 
velocity equation of (C . 2a) , and an associated first-order 
perturbation relation. 


The heading equation of (C.2b) can be expanded by use of 
(C.13) , (C. 14) , (C.15) , and (C.27a). Terms involving the cross- 
product of a "small" time function (e.g., v c Vv c ) and a perturba- 
tion are dropped, as are terms involving the cross products of two 

"rate" terms* (e.g., v i ) . After neglecting second-order 

c c 

perturbation products, using small angle approximations, and 
rearranging, the following expression is obtained: 

mv ij> - (L ♦ T a )sin<J> ■ -wv 6tj»+ sin$ -»#_ \$v 

cc ccc c Cy Vg C Cl 

- •*»*«.) 5h 

+ a sin$ 6T + (2, +T )sin4 6a 
c c c c c 

+ (L c + T c a c ) cos* c 

+ L sini X (t) (C. 34) 

c c 

where, for convenience, we have defined 

2 • q SC, (C. 33b) 

c c L a 

*See section C.6 fofjustif ication of this last simplification. 



C-14 
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By the same argument as before# both sides of (C.34) must be zero# 
so that the following "equilibrium" and perturbation relations 
result: 


iL ■ t: (L +T a ) sin 4> 


c mv 


c c c' 


(C. 31b) 


“ • i)- -to) .. -to) 


c 8in »e 1 «T 


mv ho 
c 


+ ll c +T c ) *^c So + ^V T c“c ,co “*c 


'mv 


mv. 


** + V fc) 


(C. 32b) 


where# for convenience# we have defined 


f *<t> « v in4, c 

mv_ 


X (t) 


(C. 33b) 


The flight path equation of (C.2c) can be expanded by use 
of (C.13) # (C. 14) # (C.15), and (C.27a) . Following the same type 
of simplification and decomposition used for the heading equation# 
we obtain the following " equilibrium” and perturbation relations: 




Y e “ <L c +T c c ‘c )co ^c - g/v c 
c 

6y ■ I 2L c COB ^ c 


(C. 31c) 


• . / 2L c cos* c k \ hM \ J^x 

\ \/ V mv c h0 / V OT C / 

. (1 +T_)C0S(>. (L +T a )sin$_ , 

+ _£ — 2 £ 5a £__£_c 5a+ f (t) 

mv „ mv„ Y v 


(C. 32c) 
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where, for convenience, we have defined 

f (ft s ^* e COS$ 

nr m — - x (t) (c.33c) 

raV (; 

The ground track equations (C.2d) and (C.2e), specifying x 
and y vehicle position, can be expanded by use of (C.14) and (C.15), 
simplified by using small angle approximations and neglecting 
second-order perturbation terms, and rearranged to yield the 
following expressions: 

iL, - (v +v t)cos(^ +♦ ) * Cos (* +V t) 6v (C.35a) 

N C C C C C C 

- ( V^c t)sin{ V^c t)6,f ' 

y N - (v c +v c t)sin(\)» c +^ c t) = -6y + sin 0|» c +$ c t)6v 

+ (v_+v„t) cos(lM4 t) 6^ 
c c c c 

We can now specify the nominal (x,y) position by requiring 
of the above equations to be zero, so that 

x^t) = (v c +v c t) cos (^ c +^ c t) (C. 36a) 

y N (t) = (v c +v c t) sin (’l' c + 1 5» c t' (C.36b) 

e e 

To solve these equations, we must specify v_ and . We defer 

this specification and subsequent solution for (j^, y N ) until the 

next section, where we place constraints on the choice of v ^.nd 
. c 

♦fl- 


CC. 35b) 
the LBS 
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Since the satisfaction of (C.36) implies that the RHS of (C.35) 
will be zero, it follows that the perturbation relations are 
given by: 

fix = + cos W> c +$ c t)6 v - (v c +v c t). sin (ij> c +ii> c t)fii|> 

4y = sin (tj> c +^ c t)6v + (v c +v c t)cos (❖ c +4* c t)fi^» 

Note that, in general, the coefficients are time-varying. 

The altitude equation of (C.2f) can be expanded by use of 
(C.14) and (C.15). Using the same simplifications used in the 
heading equation derivation,we obtain, after rearrangement, the 
following relation: 

VVc * ( ‘VVc + Vc )t -6h+V c 6 Y +y c &w (C.37) 

* 

Using the same arguments as before, both sides of the equation 
must be zero, so that 


(C.32d) 

(C.32e) 



v Y 
c’c 


(C. 31f ) 


If we are free to specify the acceleration terra h c , we can choose it 
so that the time function in the RHS is zero: 


h = v„Y +v y„ 
c c c c c 

With the RHS of (C.37) zero, this implies that 


(C. 38) 


fi h = v fiy +K Jv 
c c 


(C.32f) 


C-17 
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This comple tes the decomposition of the vehicle equations 
defined in (C.2). To summarize, we have defined the states and 
controls in terms of nominal and perturbation variables (via 
(C. 13) and (C.14)), defined the nominal variables in terms of 
specified maneuver rates (Via (C.15) and (C.36)) f determined the 
" equilibrium" conditions which give rise to these maneuver rates 
(via (C.31)), and defined the perturbation relations associated with 
each state variable (via (C.32)). 

C.6 Definition of Nominal Trajectory Segments 

Before proceeding with the equation development, it is convenient, 
at this point, to introduce the notion of nominal trajectory 
"segments" and their associated "maneuvers". 

We assume that the vehicle is constrained to a small set of 
"maneuvers", representative of the type of maneuvers typically 
used to effect an ILS approach and landing: 


1. 

S & L 

: straight and level flight, at constant speed 

2. 

DECEL 

: constant deceleration flight, at constant 
heading and flight path angle 

3. 

TURN 

: constant rate turning, at constant speed and 
altitude 

4. 

FLARE 

: constant rate of change of flight path angle 
at constant speed and heading 

5. 

DSCNT 

constant sink rate, at constant speed and 
heading 

We 

define a 

nominal trajectory "segment" as that portion of 


the trajectory associated with the execution of one of the above 
maneuvers. A segment starts when one of the above maneuvers is 


C-18 
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initiated, and ends when a new maneuver is initiated. The entire 
trajectory is thus considered to be generated by a successive 
concatenation of appropriate segments. 

Table C.3 shows how the maneuver rates of each trajectory 
segment are defined in terms of segment type and desired maneuver 
rates. The (constant) maneuver rates are identified with the 
subscript c, and correspond with the rate terms definin'* the 
nominals of (C.15). The (constant) desired maneuver ra ;j are 
identified with the subscript d, and are assumed to be specified 
by the procedural rules associated with a given segment. Thus, to 
define maneuver rates for the four state variables shown, one 
simply specifies the segment type and the desired maneuver rate 
for that segment. 


Table C.3: Specification of Nominal Maneuver Rates 



* unspecified; see discussion accompanying Table C.4. 


C-19 
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| 

'i 




i 

i 


I 

i 


Table C.4 defines the resulting time histories for the six 
nominal states, for each of the five segments. The table presumes 
that the time origin is coincident with the start of a segment; 
each state variable at that time is designated by a subscript c 
(e.g. , v c =v, (t=0) ) . Nominal variables which remain at their 
initial values are shown explicitly in the table; those which 
require an equation for their definition have an equation number 
entry referring to the set of accompanying equations. 

| 

j 

In effect, table C.4 provides an analytic integration of 
the nominal equations of motion, for each of the special isod 
maneuvers under consideration. The basis for the Repressions 
shown is given briefly below. j 

The nominal velocity v N stays at its initial value v c , unless 
the segment is DECEL • In that case v N is given by (C.15a) . 

i 

The nominal heading ^ stays at its initial value V c , unless jj 

the segment is TURN. In that case is given by (C.15b). j 

j ■! 

The nominal flight path angle Y N is zero during the S&L ; \ 

and TURN segments, and stays at its initial value Y c during a j j 

DECEL segment. During a FLARE segment, Y N is given by (C.15c). j' j 

During a DSCNT segment, the climb rate h_ is specified, and the j ■ 

nominal velocity v N equals v c . The nominal flight path angle is 
thus found from (C.31f). 

The rate of change of nominal ground track position is given 

by (C.36). During the S&L, FLARE, and DSCNT segments, the vehicle 

• • 

is neither turning nor accelerating, so that v and are zero, 

C v 

4 

) 

i 

1 
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Table C. 4 : Nominal Trajectory Variables 


Segment 


N. Type 

S & L 

DECEL 

TURN 

FLARE 

DSCNT 

Trajectory's^ 
Variable ^s» 






V N 

V c 

(Tl) 

v c 

v c 

v c 


*c 

*c 

(T2) 

*C 

*c 

y n 

0 

Tc 

0 

(T3a) 

(T3b) 

‘VV 

(T4a) 

(T4b) 

(T4c) 

(T4a) 

(T4a) 


h c 

(T5a) 

h c 

(Tab) 

(T5c) 


*N “ *C + K* 

y N " Y C + Y C fc 

y N “ ft C /V C 

Xj, = X c + (V c COS^ c ) t 

y N - y c + < v c 8in ^ c )t 

Xjj - x c + cos^ c [v c + v c t/2]t 

y N - y c + ® in M v c + v /21t 

Xjj - x c + (v c /^ c ) tsin(^ c + 4 » c t)-sin^ c ] 
y N “ y c “ <V*c> I cos ^ c + ^c t) ' C08,, 'c 1 

hj, - h c + Y c tv c +v c t /2]t 

h N * h c + W y c t/21t 
hjj * h c + h c t 


(Tl) 

(T2) 

(T3a) 

(T3b) 

(T4a) 

(T4b) 

(T4c) 

(T5a) 

(T5b) 

(T5c) 
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and (C. 36) integrates to (T4a) of the table. During the D&C&L 
f segemnt, i_ is zero, so that (C.36) integrates to (T4b) . Likewise, 

j C e 

I during the TURN segment, v c is zero, so that (C.36) integrates 

l to (T4c) . 

I 

i 


The nominal altitude h^ is given by (C.15f): 



(C.15f) 


where, from(C.31f) and (C.38), 


h = v Y 
c c c 


h « v Y + v Y 
c c c c c 


(C.31£) 

(C.38) 


I • 

l During the S&L and TURN segments, both h„ and h are zero, so, that 

tr C C 

\ stays at its initial value h c> During the DECEL segment, h c 

is given by v c Y c , so, with (C.15f) , (T5a) of the table follows 
l directly. Likewise, during the FLARE segment, fi c is given by 

[ V ~Y_, so, with (C. 15f ) , (T5b) follows directly. Finally, during 

i C C . . •• 

i the DSCNT segment, both v c and Y c are zero, so that h c is zero, 

l and (C.15f) implies (T5c) . 


i 


i 


E 

i 

!* 


C. 7 


Solution for Nominal Controls 


i 

i 



With the nominal maneuvers now defined, we may proceed to 
solve for the nominal control values (thrust, angle-of-attack, and 
bank) required to satisfy the "equilibirium" conditions defined 
earlier and summarized in (C.31). 

s 
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For convenient reference, we restate those conditions: 

• l 

v « — (T “D ) -qY 
c m ' c c ' y, c 

V - A (L +T a ) sin<j> 
c mv c c c T c 
c 

T C -i- ( Wc> COB *c - ® /v e 

To solve for the required bank angle, we note that if the 
segment is a TURN, then y c must be zero (recall Table C.3). From 
(C.31b) and (C.31c), it then follows that 

<J» c = tan" 1 (C.39) 

If the segment is not a TURN, then must be zero (again, from 
Table C.3). Assuming non-zero lift, (C.31b) then implies that 
* is zero. Consequently, (C.39) above applies whether or not 

C 

the segment is a TURN; i.e., for all segments. 

To solve for the required angle-of-attack, we note from 
(C. 31a) that 

T = D + mg(v /g + y ) (C.40) 

c c c c 

so that 

Wc “ (L c +D c a c ) + n ‘9 |o cV g + a c Y c ) 

Substitution into (C.31c) yields 


(C.31a) 
(C. 31b) 
(C.31c) 
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L c +D c a c " cos$ [* + g 


v„Y„ aJf, 


° C - «>•♦<. - a 0 Y c co »*ol <C< 


41 ) 


But with v_ on the order of lkt/sac, and a. on the order of 1 deg, 

C W 


a v a v 

, — -= • cos$ < — < 0.001 

g T c g 


and with Y- on the order of 1 deg, 
c 

|v c co.4 c | < |v c | i 0.0005 

bo that the last two terms of the RHS of (C.41) are effectively 
second-order "small" terms, which can be dropped. Expansion of 
the LHS, via (C.25) and (C.28), and rearrangement, then yields the 
following cubic in a : 


i 

f 

i 

1 

i 

3 

<*c 

+ aaf + ba + c = 0 
*• c 

(C. 42) 


t 

» 

where the 

constant coefficients are given by: 


* 

i 

i 

a = 

“ 2a 2 

(C. 43a) 

j 

i 

l 

j 

b ■> 

+ (C L 0 + C D q + C D f + C D g )/(n f c2 L a ) 

(C. 43b) 

i 

i 

! 

i 

1 

s 

! 

» 

1 

i 

i 

c » 

N - v* - ?! ^r c a + 

(C. 43c) 

* 

and where 

q_ is given by (C.17a) and (C.22) . 

V 


4 
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With the angle-of-attack thus specified, the corresponding 
thrust level is specified by (C.40) above, where D Q is defined by 
(C.25), (C. 28) , and the value of a c . 

It is appropriate to note that although (C.39), (C.40), and 
(C.42) define the appropriate constant controls for each of the 
trajectory segments of interest, they are "trim” controls, in the 
conventional sense, only for the S&L, TURN, and D8CNT segments. 
For the DECEL and FXARE segments, they are more appropriately 
labelled "maneuver trim" controls. 


C. 8 


Perturbation Equations 


With the nominal trajectory variables and their associated 
"trim" controls now defined, we may conveniently summarize the 
perturbation equations derived earlier. 

If we define the perturbation state and control vectors as 
follows. 


x ■ [4v,4^,4y, $h, 4x, fiy) T (C.44a) 

u m I4 t, 4<*,44>J (C.44b) 

then (C. 32) may be rewritten as 

x = Ax + Bu + z(t) (C.45) 

The state and control matrices are given by: 
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A 44 
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— J °62 
°22 ! 


B 33 1 

A 8 
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kT » 
M 1 

1 



B S 
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1 

1 

1 " 
• o 
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i i 

i J 


k i 


(C.46) 


where 0g 2 # ° 22 * °33 ar £ (®*2) # (2x2) , and (3x3) zero matrices, 

and 


*44 


“ 2D c /mv c 


0 

“9 

D </ mh o 

r2L c sin4i c 

1 

Ol 

A 

n . 

[ L c ,W cl 

L 

v c- 

\J 


L- c h o -J 

pl^cos 4> c 

e 

Y c 

0 

0 

•L c o°s*c1 

L 2 

c 

v cJ 


- 

mv h j 
- CO 


(C.47a) 


22 


cos ( ^ c +$ c t) - ( v c + v c t) sin (^ c +$ c t) 


sin(\|) c +^ c t) (v c +v c t)cos(^ c -f^ c t) 


(C .47b) 


B 


33 


1/m 

Mini 


■d c /m 


sin$ 


mv. 


-=r r s (^ e +T_) 
mv_ c c 


COS^ 

— (L +T a ) 

mv_ c *c c' 


a c c °s4>c 


cos 1 


mv. 


: ( 1 +T > 


-sin$ 


mv_ c c' mv c c c 


(L+?a ) 


(C . 47c) 
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The constant controls appearing in the above matrices (T c ,a c ,4> c ) 
are defined by the appropriate equations of the previous section. 
The lift and drag terms (L C ,D C ) are defined by (C.22), (C.25) and 
(C.28) ; their corresponding sensitivities (* c «d c ) are defined by 
(C .22) and (C.30). The time-driven perturbation input of (C.45) 
is obtained from (C.33) and is given by* 


z(t) 


"P X<t) • "c* 

0 

L c cos »c Ht) 
mv 

c 


o 

0 

0 


(C.48) 


where X (t) is defined by (C.23). It should be noted that the second 
component of the z vector is shewn as zero, rather than the general 
f^(t) expression given by (C.33b). Phis is justified on the 
following basis. If the vehicle is on a TURN segment, then Table 
C. 3 and (C.23) require that X (t) be zero, so that f^(t) is zero. 

If the vehicle is not on a TURN segment, them the bank angle is zero, 
so that again (C.33b) requires f^(t) to be zero. Thus, f^(t) 
is zero for all segments considered. 


Three points should be made regarding the state equation 
of (C.45). First, the ordering of the components of the state 
and control vectors is arbitrary; tiie particular ordering of the 
• state vector given by (C.44a), with fih proceeding fix and fiy, was 

I chosen to emphasize the fact that fix and fiy have no driving effects 

a 

i 

i 
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on the state (as demonstrated by the 0^ 2 matrix of (C.46)). The 
second point concerns the time-invariance. A 44 and B 33 are 
time- invariant , whereas A 22 is time- invariant only when the 
vehicle is not in a TURN segment. Thus, B is always time- invariant, 
and A is likewise whenever a TURN is not being executed. Finally, 
the perturbation input z only drives the speed and flight path 
angle states, and is directly attributable to variations in 
dynamic pressure with changes in these variables. 
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APPENDIX D* MODEL FOR EXTERNAL VISUAL 

Our model of external visual cue processing is based on 
the notion that the pilot utilizes perspective geometric cues 
for inferring changes in vehicle state* The use of this type j 
of cue was studied and modelled by Wewerioke lit} in his airdtaft;’ - 
landing study; our model is essentially » direct generalization 
of his approach. 7 


Perspective Geometric Modelling 



We assume that the essential features of the external visual 
scene can be abstracted by a relatively simple perspective line 
drawing. In particular, for the approach to landing ^task under 
consideration, we assume that the nominal out-the-window view 
available to the crew can be schematized as shown in Figure D.l. 

Six line elements characterize this visual scene: the horizon (H) , 

the far (F) and near (N) runway ends, the left (L) and right (R) 
runway edges, and the runway centerline (C). 

We further assume that the essential cues provided to the 
pilot by a display of this sort consists of changes in line 
element orientation, length, and displacement. As shown in 
Figure D.2a, the line element orientation angle v is assumed to 
be measured with respect to an arbitrary reference contained in 
the viewing plane and fixed to the vehicle; the (positive 
counterclockwise) perturbation in orientation 6v is the pilot's 
corresponding line element orientation cue. Figure D.2b illus- 
trates line length £ and the corresponding length change cue 5 £; 
both are assumed to be expressed in angular units, subtended at 
the pilot's viewing position. Finally, Figure D.2c illustrates 
the line element displacement cue 6n, defined in a direction 
normal to the line element and in the viewing plane; as with line 
length changes, displacements are assumed to be measured in 
subtended angular units. 
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Figure D . 1 : Visual Cue Dependence on Vehicle State 

Perturbations 
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Figure D.2a: Line Element Orientation Cue 
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Figure D.2b: Line Element Length Cue 



Figure D.2c: Line Element Displacement Cue 
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These cues arise because of changes in scene perspective, 
which , in turn, are due to changes in the relative attitude and/or 
position of the vehicle with respect to the visual objects (in 
this case, the runway and horizon) . To find the functional 
dependence of these cues on vehicle state, we first define a 
vehicle state vector*, consisting of vehicle attitude and’// 
position i 


s 14 }e, 4 >,x*,y*,h) 


where (4>,6,$) are the conventional roll, pitch, and yaw vehicle 
attitude angles, h is vehicle altitude above the field , and 
(x',y') is vehicle ground position measured in the glide slope 
coordinate reference system. From. Appendix B, 


cost . 
-sinf. 


sinij>j 

COSi|» 


:]p 


(D.2) 


where i|> LO c and ^ x GS ,y GS^ define the glide slope system, and 
(x,y) is vehicle ground position in the local navigation system. 


With this definition of vehicle state, we can now use the 
basic rules of perspective geometry to derive the functional 
relation between vehicle state and the "attributes" of the ith 
line element in the visual scene: 


(v i'*i'V “ 


(D.3) 


♦Note that this state vector is not to be confused with the one 
defined in Appendix C and the main text; it is defined here 
solely for the purpose of defining the available visual cues. 
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where f is a three-dimensional non-linear function which depends 
on the parameter vector characterising the ith element of the 
object being viewed (e.g., runway length, width, etc.). 


By assuming perturbations in vehicle state 6x y this can be 
linearized to obtain the desired expression for the ith visual 
cue sett 


(4v^» 6 b (D.4) 

where £ LIN is the appropriately linearized version of f above. 
This function effectively dictates how visual cues arise because 
of state changes in the vehicle. 



D.2 Definition of Visual Cue Set 


This general approach was applied to analyze the visual 
scene sketched in Figure D.l. It was assumed that the vehicle 
is located nominally at some point along the ILS glideslope, 
with zero nominal pitch and roll altitude, and with a nominal 
yaw attitude which coincides with the inbound localizer heading. 

The result of the analysis is summarized in Table D.l, which 
shows, for each line element, how each cue depends on the vehicle 
state perturbations. Terms appearing in the table which have 
not yet been introduced are defined in the following paragraphs.* 

The far and near end range parameters^ , 1 ^, 1 ^) are approximated 
by the ground track range to the far and near runway ends: 


♦Entries indicated with an asterisk correspond to fairly complicated 
expressions, which, as the discussion below points out, have no 
direct relevance to the present analysis. 
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a p a |x'-K* p | 

(D. 5a) 

^N ~ 1^' * u 1 

(D. 5b) 

where x' p and x' N are the along-runway locations of the far and 
near edges. From Appendix B, 

x’ p » 1140 ft + 7710 ft « 8850 ft 

(D.6a) 

x* - -1150 ft 
N 

(0.6b) 

The center-line range parameter i c Is a composite 

range, given by 

i °'( 5 * + 4 ) 1 

(D.5c) 

The line-of-sight range parameters (p p ,p N ) specify the line- 
of-sight range between the vehicle and the runway corners, and 
are given by: 

p p - .AtV 1 ' 2 

(D.7a) 

P N - <w 2 +i 2 n ) 1/2 

(D.7b) 

where W specifies half the runway width, and, for 
assumed given by 

our study is 

W « 75 ft 

(D. 6c) 
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The nominal orientation angles associated with the left and 
right runway edges are given by 


v L = tan (W/hjj) 


(D.8a) 


v R =-tan (W/l^) 


(0.8b) 


where h^ is the nominal vehicle altitude (note that the subscript 
denotes "nominal" and not "near"). 

The nominal line segment lengths associated with the far and 
near runway ends are given by 


Z F - 2tan -i (W/i p ) 


(D. 9a) 


C N = 2 tan A (W/i N ) 


(D.9b) 


and the nominal center line length is given by 


Z Q * cos 


•if 1 

( 2 *F*N 


«V*V*V 


(D. 9c) 


where the runway length is given by 


10,000 ft 


(D.6d) 
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D.3 Simplified Visual Cue Set 


With six line segments comprising the external view, and 
a potential of three cues per segment, a potential set of 18 
cues becomes available for inferring vehicle position and 
attitude,* To simplify the analysis, we shall arbitrarily limit 
the number of cues to be considered to six, to correspond with 
the number of states which the pilot is attempting to infer. We 
do this by: 

a) eliminating from consideration redundant cues; 

b) eliminating from consideration cues which are not 
simple functions of the vehicle state perturbations; 
and 

c) selecting between similar competing cues on the basis 
of cue sensitivity. 

The discussion in the following paragraphs applies these simplifi- 
cations to the cue set defined in Table D.l. 

From Table D.l, the H, F, and N segments all provide a roll 
cue. Arbitrarily choose the H cue from among this redundant set: 


6\> h » — d<t> 


(D. 10a) 


Only the H segment provides a pitch cue which is unconfounded by 
other vehicle perturbations, so choose it: 


♦Table D.l shows 17 such cues, since the line element associated 
with the horizon undergoes no length change. 
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5n„ - “60 (D.lOb) 

The C, L, and R segments all provide a yaw cue (confounded with 
lateral displacement) , but the C segment involves the simplest 
functional dependence. Thus, choose 

6n c “ ~6i|> + 6y'/#- c (D. 10c) 

All segments, except for the horizon, provide a surge cue. The 
L and R segments confound surge with other vehicle perturbations, 
so eliminate them from consideration. The F, N, and C segments 
all provide a surge cue which is unconfounded, so choose the one 
with the highest sensitivity to surge variations. It is a 
direct matter to show that this is the N segment, so choose 




5 

(D.lOd) j 


The C, L, and R segments all provide a sway cue (confounded with 
roll) , but the C segment involves the simplest functional 
dependence. Thus, choose 

6v c * -6$ + 6y '/hjj (D.lOe) 

All segments, except for the H and C segments, provide an 
altitude cue. The L and R segments do not provide a simple 
functional dependence, so eliminate them from consideration. Of 
the remaining F and N segments, the N segment provides the greatest 
sensitivity to altitude variations, so choose 

fin N " “60 - ah/l^ (D.lOf) 
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D.4 Display Equation 


We may now define a cue, or "display” vector comprised of 
the above six selected cues: 


5 * 6 v H' 5 l V fin C' 55 N' 4 v C' fin N 1 


(D. 11) 


To relate this display vector to the state and control variables 
introduced in Chapter 3 and Appendix C, we note from (D.2) that 


. I 

a 

>• _ 


COS^J 

sinif», 


sintjfj 

costk 


(D.12a) 


and recall that 


y + a 


(D. 13) 


so that 


60 «* 6y + 5a 


(D. 12b) 


Substitution of (D.12) into (D.10) then yields the following 
display equation for the external visual cues: 


6^ = C6x + D6u 


(D. 14 ) 


where 6^ is defined by (D.ll), 6x and 6u are defined by (C.44) 
of Appendix C, and C and D are defined as follows: 
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(D.15a) 


fO 0-1 



(D.15b) 


The parameters of the C matrix are, in turn, defined by (D.5) 
through (D.9) given earlier. This then defines the form and 
parameters of the display equation associated with the external 
visual scene. 
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D.5 Visual Thresholds 

As discussed In the text, all display elements have associated 
with them an effective threshold which limits the accuracy of the 
display measurement, for the visual display vector just defined, 
three thresholds are of interests rotational (v), extensional 
(£), and displacement (n). 

Based on Wewerinke's [4] earlier psychophysical and model' 
matching work, we assume the rotational threshold to be on the 
order of a degree visual ire, so that 

■ 1 deg (D.16a) 

The extensional threshold is assumed to be driven by 
discriminability limitations, and, on that basis, we choose it 
in accordance with the Weber-Flechner Law [3JJ . Specifically, we 
assume the threshold to be set at a fixed fraction of the total 
nominal line segment length, or 

6C TH “ V 30 (D.16b) 

where the fractional value is chosen to be consistent with an 
earlier analysis of visual cue processing D2) . 

The displacement threshold could be set on the basis of 
maximum human visual activity, which appears to be on the 
order of 1 minute of arc 03J . However, we feel that this is 
much too optimistic for a dynamic multi-task situation. A more 
reasonable value is that associated with Wewerinke's [4] work, 
approximately one-half degree visual arc, so that 

5t1th "0*5 deg (D.16c) 
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These thresholds act on each component of the display vector 
defined in (D.ll) , with a direct correspondence between cue type 
and threshold type. That is, (D.16a) applies to 6y^ and 6y 5 of 
(D.ll), (D.16b) applies to «y 4 , and (D.16c) applies to «y 2 » 6y 3 » 
and £yg. 
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